last executing test programs: 7m59.825703723s ago: executing program 32 (id=504): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000b00060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000001108000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 7m18.858966367s ago: executing program 33 (id=663): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x7, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x3, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x2008, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x4, 0x4, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x2000, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x800073, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0xfffffffc, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x8, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x1, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x7ffe, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x1000, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x101, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x940, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000002240)=ANY=[@ANYBLOB="0d0000000200000004000000ff3f000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000110000000400"/28], 0x50) capset(&(0x7f0000000040)={0x19980330}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000002180), &(0x7f0000002200)=0x68) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) 5m33.918029104s ago: executing program 34 (id=1537): unshare(0x2a020400) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020f0000080000000000000000000000030005000000000002000000ffffffff0000000000000000030006000000000002000000e00000010000000000000000834b8e17bc24120e3814e325e76471e3a7e6d216195c6b35"], 0x40}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xb) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @random="0bd61eb8ab4b", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0xfffc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000, 0x6040000}], 0x0) 4m0.224781495s ago: executing program 35 (id=2370): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010413000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000001108000440000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3m35.683715198s ago: executing program 36 (id=2439): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") (fail_nth: 1) 3m22.964373526s ago: executing program 7 (id=2588): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2, 0x2}, {0x7f, 0xe7}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 3m21.193737404s ago: executing program 7 (id=2594): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b09000200"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000100000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000640)=[{r7, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m19.574325844s ago: executing program 7 (id=2615): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3m19.423991571s ago: executing program 7 (id=2618): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) alarm(0xe7c5) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r2, r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="09000000010001", 0x7) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000100000f03000000020000000000000006000000000000000000000000000f010000008400002e00ae6036a9a904786c46926b23785de653549f0f7626b685d7489dfe7528a9ba2bb44bbf4c3b759de03742dc18e9e0966cc0681c96317741b5e63b163254077f595cdf1e29b425530a9ebc"], 0x0, 0x44, 0x0, 0x1, 0x400000}, 0x28) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@nodioread_nolock}, {@errors_continue}, {@noinit_itable}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}], [{@uid_gt={'uid>', r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x66, 0x64, 0x65, 0x32, 0x35, 0x66], 0x2d, [0x65, 0x64, 0x37, 0x35], 0x2d, [0x36, 0x30, 0x66, 0x37], 0x2d, [0x63, 0x65, 0x62, 0x3b], 0x2d, [0x62, 0x32, 0x33, 0x62, 0x35, 0x31, 0x36, 0x35]}}}, {@permit_directio}]}, 0x1, 0x46e, &(0x7f0000000bc0)="$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") syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r0, @ANYRES8=r0], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) 3m16.732976724s ago: executing program 7 (id=2631): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xdd) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x1000, 0x3, 0x2, 0x5, 0x15, "d26bcefd8bf1e6c7"}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) perf_event_open(0x0, 0x0, 0xe000000000000003, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) 3m15.696600985s ago: executing program 7 (id=2644): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x4490, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) 3m15.649904198s ago: executing program 37 (id=2644): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x4490, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) 2m13.307949899s ago: executing program 4 (id=3145): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000e8ff000000000004d46c0000007f00704800000000000000005d1ef862a2a1fd00000000000000000000000600000000000000ffff0000000000001c250800000000000200000000000000000000000000ffff020000000000000000001f000000000000ffbcfbffff2abd700000000000020001002000ff0000000000480003006465666c6174650000000000080077644afddc144dfcc40d62f5dcc3d1f37f1a415e585e002819274a988bd36116ca814250e47cdce4e98d5dbc7c8b2a1ef19a63cf09260593f46415a8d570d52f777943b0695e786205ccf56763040bb488c3573c91bb6e960bc9db47da00"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d7, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0xfffffff7}}, 0xe8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x64042, 0x12e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x71, 0x81, 0x2, 0xb, 0x12, 0x5}}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@bridge_newneigh={0x30, 0x1c, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, r8, 0x2, 0x1, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x800) fcntl$lock(r6, 0x6, &(0x7f00000000c0)={0x2, 0x1, 0x7fffffffffffffff, 0x9}) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0xe3, 0x5, 0x8, 0x0, 0x7, 0x4004, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x2}, 0x4000, 0x44, 0xffff7fff, 0x5, 0xdbe0, 0x7f, 0xd34, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ff1300b802000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair(0x8, 0x727a2a74c58b4717, 0xffff, &(0x7f0000000080)) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, 0xffffffffffffffff, 0x9}}, 0x48) 2m12.304087208s ago: executing program 4 (id=3152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0xb}, 0x50) pread64(r0, &(0x7f0000000180)=""/57, 0x39, 0xdef5) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffe000/0x1000)=nil, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) setpriority(0x2, 0x0, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000240)=0x4) r4 = epoll_create1(0x80000) fremovexattr(r4, &(0x7f0000000180)=@random={'os2.', 'system.posix_acl_default\x00'}) r5 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r5, 0x400000) finit_module(r5, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 2m12.08487606s ago: executing program 4 (id=3153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r2], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) dup(r7) 2m10.155987325s ago: executing program 4 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) (async) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x46) close_range(r2, r2, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") r3 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x0, 0x1, 0x0, 0x0, 0xf001}, {0xffffffff, 0x8, 0xfffffffffffffffe, 0x6}]}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8064}, 0x94) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x2008400, 0x0, 0x6, 0x0, 0x0, 0x0) (async) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async, rerun: 64) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) (async, rerun: 64) r13 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c0053be735a95ad1d5976691338a80f3ce2da97daf50c308b0d3c9d4f2c5c05ed805f4751c7e809e809223e3bf0e4d52973afeae79434abaa8da4cb254e219a4508bfaac79e4b2fbfa56b88f65a4539c4962223b9a33f026213ff01000000000000546dca11712ef8d40a5988582962a227c1fe6d8ccb5d43f095629655a91e92bda41d7a29ac56a7117d88b2f7e2870f73a3621ee03be30b6c7c2670765c14daf6d3c2aabae18d4be58a9c2d6dbbd90077d02f02090bf94e5b802f15240347221f71ad210eddb7c14c48280822354f90fe"]) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 2m9.839558941s ago: executing program 4 (id=3165): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) fstat(0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) sendmmsg(r5, &(0x7f0000000340), 0x0, 0x4048004) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10080000, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m9.021105411s ago: executing program 4 (id=3177): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdir(0x0, 0x111) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a883, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000080)=0x1) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) 2m9.014060171s ago: executing program 38 (id=3177): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdir(0x0, 0x111) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a883, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000080)=0x1) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) 55.668813067s ago: executing program 0 (id=3816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21001}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}}, 0x1) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b4) chdir(&(0x7f0000001180)='./bus\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x20820}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 55.20127389s ago: executing program 0 (id=3822): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2, 0x2}, {0x7f, 0xe7}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 52.450127986s ago: executing program 0 (id=3829): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r6, 0x5452, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r7, @ANYRES8=r7], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) 51.54731491s ago: executing program 0 (id=3838): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='*-\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) 51.459517404s ago: executing program 0 (id=3839): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000ffd7116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 51.15306454s ago: executing program 0 (id=3844): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) 51.112114842s ago: executing program 39 (id=3844): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) 43.207561792s ago: executing program 9 (id=3908): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r0, &(0x7f0000000180)=""/46, 0x2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x2, 0xc, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x8, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6, 0x1, 0x1000, 0x7, 0x0, 0x1, 0x0, 0x7, 0x80000000000}) request_key(&(0x7f0000000300)='big_key\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, r3) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x29) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="373cf07dec8348c71a17bd020000000400000008", @ANYRES32=0x0, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = syz_open_procfs(0x0, 0x0) writev(r8, 0x0, 0x0) 40.808902091s ago: executing program 9 (id=3916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x1000}) (async, rerun: 32) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mmap(&(0x7f0000462000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x1010, r1, 0xa9525000) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000032c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '+]'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) (rerun: 32) fallocate(r2, 0x10, 0xffff, 0x8001) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000}) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xfffffffc) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189400, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 40.657896529s ago: executing program 9 (id=3919): bind$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r1, 0x402, 0x80000023) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000008) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) fcntl$notify(r3, 0x402, 0x21) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) (async) fcntl$notify(r1, 0x402, 0x80000023) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (async) fcntl$notify(r2, 0x402, 0x40000008) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) fcntl$notify(r3, 0x402, 0x21) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") (async) 39.696722936s ago: executing program 9 (id=3926): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@bh}]}, 0x1, 0x5c1, &(0x7f0000001380)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100", 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b}, 0x28) io_uring_enter(r3, 0x3516, 0x0, 0x40030000000000, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) 39.459543628s ago: executing program 9 (id=3930): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000010400000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="00010000ac000000140012800b000100697036746e6c0000040002808fab92c13c447f96be12967866dedc72ba0d410ea4d39d320343a70c90a4ef05003bef0274f423288c5bc074eaad084e15e324d7a922de78185824e40de78b2419dfe64e6c45067a4a53edab505f611ab877b9bec182e7dc1103ced45c8b8b1baa70"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000040a030000000000000000000a00000a0900010073797a3100000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 37.581100391s ago: executing program 9 (id=3945): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 37.558581362s ago: executing program 40 (id=3945): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 16.926326071s ago: executing program 2 (id=4086): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0xb4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.840920125s ago: executing program 2 (id=4087): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x10340, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x4000, 0x10001, 0xda, 0x4, 0x7, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 16.789605268s ago: executing program 2 (id=4088): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000640)=""/196, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0x3}, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r5 = dup2(r4, r4) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x100000, 0x80000}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca0e00000a0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x6, r6, &(0x7f0000000240)="f43f0df60714095cc392de10b6192d1dd1f2d9fdbf88c7e3cf987e4afccf90c6901934bd5c85a8", 0x27, 0x80, 0x0, 0x2}, &(0x7f0000000400)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.204854226s ago: executing program 2 (id=4100): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r2, 0x4) 15.028859615s ago: executing program 2 (id=4101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b98, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x7, 0xaa92, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cce, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfff, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x2, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x3, 0x800, 0x101, 0x800, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 14.813480536s ago: executing program 2 (id=4103): openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/cgroups\x00', 0x0, 0x0) syz_io_uring_setup(0x6397, &(0x7f00000004c0)={0x0, 0x53c5, 0x400, 0x0, 0xd9}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000000207010200000000000000e4020000080900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000200)=0x440, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) 14.688550622s ago: executing program 41 (id=4103): openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/cgroups\x00', 0x0, 0x0) syz_io_uring_setup(0x6397, &(0x7f00000004c0)={0x0, 0x53c5, 0x400, 0x0, 0xd9}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000000207010200000000000000e4020000080900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000200)=0x440, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) 5.101464197s ago: executing program 6 (id=4145): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r4, 0x5452, 0x0) shutdown(r4, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r5, @ANYRES8=r5], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) 4.83497978s ago: executing program 5 (id=4149): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCGNPMODE(r2, 0x4004743c, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x6}, 0x1c) flock(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x3e0000}, {0x0, 0x0, 0x8000}], 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000009c0)={'tunl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x8000, 0x20, 0x80000000, 0xfffffffe, {{0x35, 0x4, 0x3, 0x8, 0xd4, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0xe3, 0x1, 0xa, [{@remote, 0x212c085f}, {@multicast1, 0x155ab742}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x24, 0x94, 0x3, 0xb, [{@multicast1, 0xe}, {@remote, 0x4}, {@broadcast, 0x6ae85514}, {@remote, 0x5}]}, @cipso={0x86, 0x19, 0x2, [{0x2, 0x6, "4e8e6c3c"}, {0x6, 0xd, "2ab214c168efa74984a68e"}]}, @lsrr={0x83, 0x23, 0x24, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x14}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x14, 0x1, 0x3, [{@local, 0x1}, {@private=0xa010101, 0x70f4}]}, @rr={0x7, 0x1b, 0xe6, [@multicast1, @local, @remote, @remote, @rand_addr=0x64010101, @broadcast]}]}}}}}) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001dc0)=""/69, 0x45}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@block={'block', 0x3d, 0xc00}}, {@overriderock}, {@nocompress}]}, 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") 4.62506369s ago: executing program 6 (id=4150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = epoll_create1(0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657874656e642c6163636573733d636c69656e742c6361ed00653d7265616461686561642c00"]) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$eJzs3E1sVNUeAPD/nbb0PeDRwuM9BYlU0Uj8KFBQWJj4kZi40ZjoApdjKQQ7UENrIqSRaghuSJTEvdG4MXHjxoUrV0ZdmbhxoXtDJIaN6GrMvXPvMG1npmM77RT6+yWXOWfm3DnnP/ee3nPPYSaADWsk/SeJ2BoRP0fEUESUFhYYqT3cvDE7/ueN2fEkqtWXf0/S3eKPG7PjRdErl5PscUvtPfvTh9KlJJ5uUu/0+QuT5Upl4lyePzBz5o0D0+cvPHb6TPnUxKmJs2PHjh05fOjoE2OPdyXO7Wlbd789tWfX869efWH8+NXXvvs8yWOPBXF0x0DM3Xr7RR7sbmU995+GdNLftmhp1RtDxwYjso46kPX/oei7tK3+2lA8927LHavVanWN2gisjrQbj7V+ea4K3MGS6HULgN4oLvTp/W+xrdHQY124/kztBiiN+2a+1W56+us3qgML7m+7aTYijs/99VG6xarMQwAAzPd1Ov55tNn4rxT/byi3LZsP/leW3h4ROyLiv0nEzoj4X0RW9q6IuPsf1j+yIL94/FO6toywOpaO/57M17aKLa+3KDLcl+fSMeBwDCQnT1cmDuafyf4YGEzzh5q+exLZIlD8+H6r+kcaxn/pltZfjAUzg/nW4ER5przyyGuuvxOxu79Z/PkCXr6GtSsidi+zjtMPf7YnsrnG4pm++mtLxt9O+3WmjlQ/jniodvznYkH8haRxfXJvzF+f/C2NpTJx8EBxViz2/Q+XX2pV/4ri74L0+G9uev7X4x9OGtdrpxe9xaal6rj8y3st72lGIp6KtvGXrvU3Of83Ja/Mq/yt8szMuUO38vOeb5jgLvJF+TT+/fua9/8dceuTuKeh/nsjYm9+7O6LiPsjYl+b+L999oHX28Tf0+P/xeSuk9Hp8S+OQ+1EqJ8ReSL9yCebvdQ3+c1XrepfOv70+B/JUvvzZzr5+9esgc0Sy/zYAAAA4LZSioitkZRG6+lSaXS09n/4d8bmUmVqeuaRk1Nvnj1R+47AcAyUipmuoTwf+fzncC2f3X2PZY8RF/P50sP5vPGHff/O8qPjU5UTvQ4eNrgtLfp/6te+XrcOWHVdWEcDblPt+v8nR9ewIcCa6+j6P7jsPYF1bFEvnv+rFX6wAe5gruKwcTXr/xd70A5g7bW+/k8YGsAdrt7JP+igcMPXvRZ+eRO4/bjIw8a1dP9/cbV+/wronY6+JL+uEkky75n4NKL9Xknv27yMxJX10YzWiSiti2YsO1Fe2e6Da9/m/o5/1eJ89WK5Uvnpy5VU2uu/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xdwAAAP//nM7m/g==") 3.872790278s ago: executing program 1 (id=4156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r2], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) dup(r7) 3.734244475s ago: executing program 5 (id=4157): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x10fff, 0xa4, 0xffb, 0x6, 0x4, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x2, 0x1000, 0xfffffff9, 0x3, 0x3, 0x2000, 0x4d, 0x0, 0x6, 0x9, 0x8, 0x7, 0x2504, 0x5, 0x763, 0xd, 0x0, 0x3, 0x2b12, 0x100, 0x81, 0x1c00, 0xd, 0x7, 0xbed4, 0x8, 0x6, 0x9, 0x0, 0x211000, 0x8, 0x5, 0x1, 0x2, 0x1, 0x80, 0x6, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x5, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4009, 0xfd, 0x80009, 0x2af, 0xf7, 0x5, 0x2, 0x2, 0x3, 0x4, 0x7, 0x4009, 0xe, 0x3, 0x100003, 0x8, 0x80000752, 0x0, 0x1, 0x0, 0x10001, 0x3, 0xffffffff, 0x10001, 0x5, 0x9, 0x8, 0xfdffffff, 0x2, 0x40, 0x1084, 0x2, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0xffff, 0x2, 0xb, 0x100002, 0xd9d, 0x12, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0x8, 0x0, 0xfffffff7, 0x4, 0x3d, 0x8, 0x0, 0x3, 0x401, 0x66d1, 0x8, 0x7, 0x8, 0x6, 0x5, 0xffffffff]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x11000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x4, 0x0, 0x5e, 0x1], 0x0, 0x1}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0xffffff00, 'pimreg\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x2, 0x4}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x2, 0x2, 0x3ff, 0x7, 0x0, 0x800]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 3.718556136s ago: executing program 1 (id=4158): r0 = socket(0x10, 0x3, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000eabf18943ca516fdd45ceb98a054b589437419142c5d639ff7ffffff0f1e18bac02987f86614e242", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="ff020000000000000000000000000001000004d433000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000100000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x4e, 0x0, "e83ae75240c2d658ec87fb53679fd045002c44b2976c446b1ab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9ef20cb499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmsg(r1, 0x0, 0x40000626) listen(r2, 0x3) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r3, 0x8) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xffff, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x6, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xffb, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000002, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xdfff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0x9, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0x3, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e4, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x4, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0x8, 0xb, 0x8, 0x5598, 0x3, 0x3, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x3, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0xfffffffe, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x7, 0x2, 0x0, 0x5, 0x100, 0x8, 0x8, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000881}, 0x8010) write$tun(r4, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES64=r2, @ANYRESOCT=r2, @ANYBLOB="3c660f34b8d074df91eecdcd3539582233b0ee651b461afb6995fc8d4155a846a450ddf4e9452c7593d77fd86b7658ca8e0fd3d5d1585fe2e4ac75f30037c2ee4a5cd9b12310f7a01096c84c143c84c92f9003566dec76518eba83e2f8edda97af723e6015cb80e323e6cfb81a7c3a99766fec513363d9e35cc811c6798d4969cdc041eb17bd854344fa93e6"], 0x38) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800000000000000000000000000010000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) rename(0x0, &(0x7f0000000080)='./bus\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 3.61763812s ago: executing program 5 (id=4159): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r6, 0x5452, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) alarm(0xe7c5) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r7, @ANYRES8=r7], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) 3.455829299s ago: executing program 3 (id=4161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000380)=0x60) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000003c0)=0x3, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xfc, 0x38, 0xff, 0x1, 0x0, 0x423, 0x68014, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x39f, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x100, 0x80, 0x3, 0x9, 0x1, 0x1ff, 0x1, 0x0, 0x6, 0x0, 0x5}, r1, 0xc, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000001140)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.400757331s ago: executing program 3 (id=4162): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r5, 0x5452, 0x0) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) alarm(0xe7c5) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r6, @ANYRES8=r6], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) 3.202796811s ago: executing program 1 (id=4163): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x44}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.166249433s ago: executing program 1 (id=4164): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45000000", 0xd7}], 0x1}, 0x40824) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000020000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="000100001000130400000000fcdbdf25e000000100000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000ffffffffffffffff00000000000000000800000000020000fdffffffffffffff00000000000000000100000000000000cc000000000000000000000000000000f600000000000000000000002cbd7000000000000a00010900000000000000004f001200726663343330392863636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000600000006373d300"], 0x140}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) r9 = socket$inet6(0xa, 0x800, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x4, 0x4e20, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffff6b83}, {0x0, 0x1, 0x0, 0x1c0d}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x3, 0x0, 0x3}}, 0xe8) 2.363046243s ago: executing program 5 (id=4165): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r1, 0x5608, 0x2) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b0000000600000005002000029f"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500000063000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.040994188s ago: executing program 5 (id=4166): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x908e, 0x4}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) openat(r1, &(0x7f0000000240)='./file1\x00', 0x282000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4800000, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0xb4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.982585992s ago: executing program 5 (id=4167): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffc0000000000000, 0xffffffffffffffff, 0x9) munmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x8004}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.941605644s ago: executing program 3 (id=4168): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') sendfile(r4, r4, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000100000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10) ppoll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x2, 0x4) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000090642fea241c7c94687204f010200000000000000000200ffff20e006f23900018008000140e000000208000a40000000020500b400020000000900020073797a31000000080000000000000080"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.496802056s ago: executing program 6 (id=4170): r0 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x9c, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3c}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.281873447s ago: executing program 1 (id=4171): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x500, 0x0, 0x310, 0xffffffff, 0x118, 0x208, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x8, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@local, @ipv4=@rand_addr=0x64010100, @gre_key=0xffff, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv6=@private0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}, @icmp_id=0x68, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 0x4e21, 0x4e20, 0x4e22, 0x4e23, 0xffffffff, 0x7, 0x6d91, 0x0, 0xffff66f7}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3}, [0xff, 0xff, 0xff, 0xffffff], [0xffffff00, 0xff, 0xffffffff, 0xffffffff], 'caif0\x00', 'bridge0\x00', {0xff}, {}, 0x2c, 0x4, 0x3, 0xa}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x4, 0x7f, 0x9, 0xc6, 0x1000, 0x402}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa, @ipv4=@private=0xa010102, @ipv4=@empty, @icmp_id=0x68, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 1.176294921s ago: executing program 8 (id=4172): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x26000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4044015}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000400000000000000000a0040"], 0xb8}}, 0x0) 1.057150957s ago: executing program 8 (id=4173): unshare(0x20040600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="000000000000000018080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.028756189s ago: executing program 3 (id=4174): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xc, &(0x7f0000000040)={0xd, 0x20000000090}, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffde8, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xa, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x1}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[], 0x0) poll(0x0, 0x0, 0x9) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000180), 0x0, 0x20033, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r6, 0x0, 0x4004045) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x280882, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f00005b5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/190, 0xbe, 0x0, 0x0}, &(0x7f0000000300)=0x40) 989.682051ms ago: executing program 8 (id=4175): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) 492.573146ms ago: executing program 3 (id=4176): madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x101000, &(0x7f0000000280)={@_ha_fsid={[0x2, 0xff]}, {0x7, 0xfff8, 0x1, 0x8}}, 0x7fff, &(0x7f00000002c0), &(0x7f0000000300)=0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e27, 0x9, @local, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="f36b4e96df5d3a7c5469b7868c9a534d6de2d330347a2db044da7324800000000000000000004903", 0x28}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x27, 0x5, 0x806a7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000680)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)="a4bdae6d94df29d3e7467be0e6f4f790dc1aebe8616095f65d0f436c16e70060475cdbaa28475ac8dd60e0f1b16f5fb1bf79bf318cdd22ed83e95efdf71558951245f5647fd10abe402dc71093d340ffb0d75295524db3272987cfeb21a08d31cbcb7c12eceadbe3b47b721abd18b1ad205bddc676fc68675a1e432877e49f465cbd81560a9ef7a7de639cfcbd701d0ae14d340e06c8dd5f6d24d988aab8f193a087d75826c646bc6474b1af7e9ca07cafd744f6f4ee6a4710a3e02c0e3016c0dba371f5a49bf5834cc025836b320d972c452f4458eadc7f3c11ef911eb3", 0xde}, {&(0x7f00000007c0)="e9213bd61cf9c3367dc78a96731c2df78060caa08025b70b7efdb2f06d7e1de43fb1b1a7be2796d76bac9fb312958586fbb8234143f58a13701f021ec10c6affde8d47b82fd24548ff3f430d787c677eb93c086c37ff2a3193e7aae6669d3791280d7766c3e6643818a92f6158e22faa835e1b1fc923018c3ef5667591b4f9ce6cda10272d225be6f4e227f043c084981579aa215f68b4d473c4f3df0aa47d391d75d7b2e80e6af196fd7be9088367c250ff4160f5c0c811b93cf8bfacbe59a8a4c3b37be93647b79e4213", 0xcb}, {&(0x7f00000008c0)="d6e9ddde31178f1c3ced148f44e5d1a68fd155a60442efe8595d94cf50d87eec6a2f913ba861ee3f32fa42a713b0659b21dda6878ea5633bc186eccb4261c7eb1bd7b6d23610d348fb9054692dda9918fb63b1554a5e2c7f", 0x58}, {&(0x7f0000000940)="14c48eb1d113fed941115335f7b8c1fef42b721ede150b9017fa0afe460a05b223610f8f37b99ccece168651a12de922b6b4af53a538cb197b9e30b273b1618d73eefea97a5a76f10d6b79eaa1461f2cfb929b8f3686ed59f0f3fa489d0b48081fdc5a6d219014ba553c71bc24806a2a61f80ef0a408e173c0a2f27c274614b46475633ebb63f7f84e01b5d4d591544f94f490429e95adb7b47f136bb300f6d8cad0cc00ab6e31fb3915002f115fce868a63b3d76524a266efca1cf372d0b85f2e4d5c967fc6eaaf1b1d00ab564277a1bd473577c54828b1", 0xd8}, {&(0x7f0000000a40)="58951e95973e6484ce707d6e12b58e5683c2a9e55f7476fb525b8ba3af0ff9fc578fac704104e8c97a15c8d3a7a74a39c8738fe2e30522f5a472acb670cfe5ad49b94378e78260", 0x47}, {&(0x7f0000000ac0)="0a5b3ad470e5e67d821cf5434115946802a3bd0aa5328015d7aab1ad4d28cc809cb92be31c1e56697e2f5e3f645b7dc75f9928a2b42aa08079b1cbccaea53114bd82a57c3237f0d3b07c670b3e9d67d7206ea1010d6b43026c7faa6d6e708b5822c21d7c2ddaf2a659d9fb5e4adc00764c8c056fb4c59b380eaafe7ff54c737149180cd3d349366d3f3fec3f3f6180fa7adb0c0c6043228af754b0ad7aa7745cfe3a1b10112a85a746437c520d570013b8e35f87cd06", 0xb6}, {&(0x7f0000000b80)="d9751da74fb9df879828f2483b0721a7d8d18ffe104227192131c531778cca7a472873beaa5429456981e1268818947cc10085e9ba6f0ae71d7aacea392121d124b234dda0e10fa2", 0x48}], 0x7, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffc0}}], 0x80}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d00)="cc16ce92d6f518155c6806937ea683d52f6f24e4ae7e852199c7d8e8eb4211aa54f8a93bb2c31273d88691eff5215566e3e1f5e7fcbe0fbcf30a03e6bf4e3c83ad32777dc746", 0x46}, {&(0x7f0000000d80)="098ab56a17c0719bfd162c6fc6cc767e4fa37279b28957d38444124222f2ec5714726b2b6cd9d1beaba7a232c9045667a4a812ded9f4d09c193757f55ec2ea901b87f868641c2659466f39121d0ce42884806abd93ce1c055901a35c00", 0x5d}, {&(0x7f0000000e00)="21721b2824aaba1efe4826dea7c45c8d24e8a85d62f008cce3d1a12c4e91eb25c62d255993cf2fee33d6c27ebd5395fcd091e9a546fdda93a38d19549dfd1f64c390cc9d9cfb8c2524ff20a3e9aa534b20699038dd6fbbc3b4654f95752deded800b5e92d68a19c6c3de39c105480916d94b62b0033ba7283bdcdd1faa32d0166b6674c33a2fe8313e6de0f3c51e", 0x8e}, {&(0x7f0000000ec0)="656ac411a4a6d88c147af1453601b880a477e98d96fdfd94743219b66d57b8a66f8ca0dca25180bc16690e1feb473e9d6f32575ed464bd6e1d48886449e85693e88824c5ea9d30acf17b276dcda38f27b810010417eb16beeba2582b1119454b5c71ae830708ba3909497c2e3a499d11b14399186a9b21ab8624de3443b23ae4bf66d8ec2b47622bb5db2c8465dfc0802cd04d346025f4cec66a1b2c94804c55f59534157989170d508a521b82d3aca80df648e214ffc3308cb4e39df035bb8dd8f16000d33ad35b1ce89f96a60f739442aebadde9a6ddc1f073a1f0aad16c154f3c4c83503e", 0xe6}, {&(0x7f0000000fc0)="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", 0xfe}], 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x178}}], 0x2, 0x14005811) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) vmsplice(r1, &(0x7f00000013c0), 0x0, 0x8) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xc82c00, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r10, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a707000000f90400"/22, 0x16}], 0x1, 0x2007, 0x1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d78d8df9", @ANYRES16=r9, @ANYBLOB="00042cbd7000fcdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111ad000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) readv(r8, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/172, 0xac}], 0x2) 449.723718ms ago: executing program 6 (id=4177): socket$inet6(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001800)=ANY=[@ANYBLOB="34000000030601020000000000000000030000060900020073797a30000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) 404.38514ms ago: executing program 3 (id=4178): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r5, 0x5452, 0x0) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) alarm(0xe7c5) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r6, @ANYRES8=r6], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) 394.542741ms ago: executing program 8 (id=4179): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 385.154601ms ago: executing program 1 (id=4180): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8ff, &(0x7f0000000040)=0x1) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000004c0)=""/126, 0x7e}], 0x2, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4137, &(0x7f0000001540)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pS \x00'}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x3, 0x1, 0xa, 0xffffffffffffffc0, 0x1}, @call={0x85, 0x0, 0x0, 0x2c}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x1, '\x00', 0x0, @fallback=0x38, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x6, 0x9}, 0x10, r1, r0, 0x5, &(0x7f0000000340)=[r2, r3], &(0x7f0000000380)=[{0x3, 0x4, 0xd, 0x1}, {0x1, 0x4, 0xc}, {0x4, 0x2, 0xa, 0x7}, {0x1, 0x2, 0xf}, {0x0, 0x1, 0x5, 0x8}]}, 0x94) 243.804618ms ago: executing program 8 (id=4181): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2, 0x2}, {0x7f, 0xe7}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 17.023079ms ago: executing program 6 (id=4182): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\\', 0x1a000}], 0x1, 0x0, 0xf203, 0x804c040}, 0x1) 6.08321ms ago: executing program 8 (id=4183): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$eJzs3d9rW20dAPDvOW32s7MdejEHzuEm7dAl7eq24sVUEL0aqPN+1jYtpWlTmnRby9AO/wBBRAWvvPJG8A8QZH+CCAO9FxVFdNML4X3f5SUnSdd1ydqxNNmazwee5nme5OT7PAl5ep5zHs4JYGBdjIhLEfG8VqtdiYjRZn3aTLHdSPXXPXv6cK6ekqjV7vw7iUgadfWXTex6z9PNzU5ExHe+GfH95NW4lc2t5dlSqbjeLBeqK2uFyubW1aWV2cXiYnF1enrqxszNmeszk13p50hE3Pr633/2419/49bvv3j/L3f/OfGDpFkf8aIf3dboei77LFqGI2L9MIL1yXDWQwAA3get/fzPRcSVGI2hbG8OAAAAOEpqXxmJD5OI2h7H91YAAAAA7600WwObpPnmOoCRSNN8vrGG91NxKi2VK9UvLJQ3Vucba2XHIpcuLJWKk821wmORS+rlqSz/onxtp5xk5emIOBsRPx09mZXzc+XSfL8PfgAAAMCAOL1n/v+/0cb8f5cP+tY4AAAAoHvG+t0AAAAA4NCZ/wMAAMDR55L/AAAAcKR96/bteqq17n89f29zY7l87+p8sbKcX9mYy8+V19fyi+XyYnbNvpX93q9ULq99KVY3HhSqxUq1UNncurtS3lit3l166RbYAAAAQA+d/ezjPycRsf3lk1mqO9bvRgE98UZLf/52eO0Aem+o3w0A+sbSXxhcuX43AOi7ZJ/nOy7e+UP32wIAAByO8U+3P/+f7ntsYDvtUROBQ+L4Hwyu/Y77AUeX8/8wuHIxFCbyMNj2uwXI25//r9XeqEEAAEDXjWQpSfPNc/4jkab5fMSZbE6QSxaWSsXJiPhERPxpNHe8Xp7KtkycOwAAAAAAAAAAAAAAAAAAAAAAAACAA6rVkuM1AAAA4EiLSP+RNO8DPD56eWTv8YFjyf9Hs8eIuP/LOz9/MFutrk/V6/+zU1/9RbP+Wj+OYAAAAAB7tebprXk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTs6cP51qpl3H/9bWIGGsXfzhOZI8nIhcRp/6bxPCu7ZKIGOpC/O1HEXGuXfyk3qwYa7aiXfyTfYyfRsTpLsSHQfa4Pv58td3vL42L2WP739+NbIR6e53Hv3Rn/BtqE79ed+aAMc4/+W2hY/xHEeeH248/rfhJh/Hv0gHjf++7W1udnqv9KmK87f+f5KVYherKWqGyuXV1aWV2sbhYXJ2enroxc3Pm+sxkYWGpVGz+bRvjJ5/53fPX9f9Uh/hj+/T/8gH7/9GTB08/2cjmdjZPXsSfuNT++z/XIX7a/P4/38zXnx9v5bcb+d0u/OaPF17X//kO/d/v+584YP+vfPtHfz3gSwGAHqhsbi3PlkrF9YHOvNWnUd8teid68W5m6p/rO9CMtpkfHsI71/fM+92vbmT6OiwBAACH4NU5MAAAAAAAAAAAAAAAAAAAANBrvbicWG5PzO3sbzeung8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D0fBwAA///2ytFK") 0s ago: executing program 6 (id=4184): syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2008400, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x7fffffff}}, {@commit={'commit', 0x3d, 0x7}}]}, 0x0, 0x79c, &(0x7f0000000980)="$eJzs3c1rXFUbAPDnTvPVNO/bvPDCS99VQNBA6cTU2Cq4qLgQwUJB17ZhMg01k0zJR2lCQIsIbgQVF4JuurZad2792Oof4MKdC22pmhZTXMjIndxJp81MmqQzHcv8fnCTc+5HznnuuR8ncy5zA+haI+mPXMShiHgviTiYzU8iorea6ok4sbHe+tpqIZ2SqFRe+S2prnNrbbUQddukDmSZH3+J+ObtiMO5reUuLK/MTJZKxfksP7Y4e35sYXnlyLnZyenidHHu2PjExNHjTx8/1rpY//h+Zej6+y8+8fmJP9/639V3v03iRAxly+rjaJWRGMn2SW+6C+/yQrzR6uI6Kul0BdiT9NTct3GWx6EkTfd0ukoAQJulvdBKpVLpy/IVAKALJO75ANBlap8D3FpbLdSmzn0a8fDdeD4iBjbir41vbizpycbsBqrjoIO3krtGRpKIGG5B+SMR8cmXr11Jp2jTOCRAI29eiogzwyNbr//JlmcWduvJHawzck9+s/wfeh+wdOB+vkr7P8806v/lNvs/0aD/09/g3N2Lpuf/pty1FhTTVNr/e67u2bb1uvgzw/uy3L+qfb7e5Oy5UjG9tv07Ikajtz/Nj29TxujNv242W1bf//v9g9c/TctPf99ZI3etp//ubaYmFycfJOZ6Ny5F/L+nUfzJZvsnTfq/p3ZYxkvPvvNxs2Vp/Gm8tWlr/O1VuRzxeMP2v/NEW7Lt84lj1cNhrHZQNPDFTx8NNiu/vv3TaX1ttZJEXGl9pI2l7T+4ffzDSf3zmgu7L+O7ywe/brasQfyF2v9CGxof/33Jq9V0bdz64uTi4vx4RF/y8tb5R+9sW8vX1k/jH32s8fm/3fGf9k7O7DD+nuu/frb3+NsrjX9qV+2/+8TV9Zl9zcrfWftPVFOj2ZydXP92WsEH2XcAAAAAAAAAAAAAAAAAAAAAAAAAsFO5iBiKJJffTOdy+fzGO7z/G4O5Unlh8fDZ8tLcVFTflT0cvbnaV10erPs+1PHs+/Br+aP35J+KiP9ExIf9+6v5fKFcmup08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQOdDk/f+pn/s7XTsAoG0GOl0BAOChc/8HgO7j/g8A3cf9HwC6j/s/AHQf938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa7NTJk+lUub22WkjzUxeWl2bKF45MFRdm8rNLhXyhPH8+P10uT5eK+UJ59n5/r1Qun5+IuaWLY4sDEbGwvHJ6trw0t3j63OzkdPF0sfehRAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu7OwvDIzWSoV5yUegURP1mqbc/ZHR+tzey9b5WpBtKQake2Tbdbpa0fsaRT/hENi+8RQ7HnzTl2RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4tfwcAAP//4S0VJw==") bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x65]}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000"], 0x48) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000540)={0x24, @none={0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfffffffffffffd06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x200, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1daf000}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x59a8}, {0x8, 0x13, 0x101}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7c1c}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd23e}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0xef49}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0xdd}, {0x5}}]}, 0x200}, 0x1, 0x0, 0x0, 0x51}, 0x4000) kernel console output (not intermixed with test programs): dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 488.426966][T18186] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 488.430986][ T28] audit: type=1400 audit(2000000195.920:2762): avc: denied { open } for pid=18174 comm="syz.8.3530" path="/226/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 488.466818][T18186] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3531: bad orphan inode 131083 [ 488.478049][T18186] loop9: lost filesystem error report for type 5 error -117 [ 488.481376][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 488.496946][ C1] EXT4-fs (loop9): initial error at time 2000000196: ext4_orphan_get:1417 [ 488.498604][T13140] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 488.505858][ C1] EXT4-fs (loop9): last error at time 2000000196: ext4_orphan_get:1417 [ 488.515622][T18186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.617111][T18186] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3531'. [ 488.626342][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3531'. [ 488.656171][T18196] xt_bpf: check failed: parse error [ 488.700511][T18196] tipc: Started in network mode [ 488.710273][T18183] msdos: Bad value for 'gid' [ 488.719636][T18183] msdos: Bad value for 'gid' [ 488.752510][T18196] tipc: Node identity ac1414aa, cluster identity 4711 [ 488.787886][T18196] tipc: Enabled bearer , priority 10 [ 488.824285][T18196] netlink: 'syz.8.3534': attribute type 1 has an invalid length. [ 488.825904][ T28] audit: type=1400 audit(2000000197.190:2763): avc: denied { mount } for pid=18201 comm="syz.0.3537" name="/" dev="rpc_pipefs" ino=50076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 488.889704][T18205] xt_hashlimit: size too large, truncated to 1048576 [ 488.891265][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.027142][T18219] set_capacity_and_notify: 1 callbacks suppressed [ 489.027159][T18219] loop8: detected capacity change from 0 to 1024 [ 489.114479][T18219] EXT4-fs: inline encryption not supported [ 489.120483][T18219] EXT4-fs (loop8): unable to read superblock [ 489.230424][T18231] loop2: detected capacity change from 0 to 512 [ 489.241422][T18231] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 489.261948][T18231] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 489.282635][T18231] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3545: bad orphan inode 4 [ 489.293056][T18231] loop2: lost filesystem error report for type 5 error -117 [ 489.299557][T18231] EXT4-fs (loop2): 1 orphan inode deleted [ 489.306916][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 489.306935][ C1] EXT4-fs (loop2): initial error at time 2000000197: ext4_orphan_get:1417 [ 489.306955][ C1] EXT4-fs (loop2): last error at time 2000000197: ext4_orphan_get:1417 [ 489.336945][T18231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.745755][T18246] loop8: detected capacity change from 0 to 1024 [ 489.953276][ T4721] tipc: Node number set to 2886997162 [ 489.994280][T18246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 490.003205][T18246] System zones: 0-1, 3-36 [ 490.014857][T18246] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3552: bad orphan inode 134217728 [ 490.026279][T18246] loop8: lost filesystem error report for type 5 error -117 [ 490.034058][T18246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.174138][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.243785][ T28] audit: type=1400 audit(2000000198.630:2764): avc: denied { ioctl } for pid=18245 comm="syz.8.3552" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 490.302118][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.316872][T18271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=18271 comm=syz.9.3559 [ 490.386705][T18279] loop8: detected capacity change from 0 to 512 [ 490.396310][T18281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3565'. [ 490.423240][T18279] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 490.431880][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3565'. [ 490.453821][T18279] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 490.483923][T18279] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3563: bad orphan inode 4 [ 490.516404][T18279] loop8: lost filesystem error report for type 5 error -117 [ 490.521346][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 490.532360][T18279] EXT4-fs (loop8): 1 orphan inode deleted [ 490.535136][ C0] EXT4-fs (loop8): initial error at time 2000000198: ext4_orphan_get:1417 [ 490.541171][T18279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.549353][ C0] EXT4-fs (loop8): last error at time 2000000198: ext4_orphan_get:1417 [ 491.429917][ T28] audit: type=1400 audit(2000000199.810:2765): avc: denied { ioctl } for pid=18304 comm="syz.0.3571" path="socket:[50799]" dev="sockfs" ino=50799 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 491.579586][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3572'. [ 491.594318][ T28] audit: type=1400 audit(2000000199.980:2766): avc: denied { map } for pid=18316 comm="syz.0.3574" path="socket:[50820]" dev="sockfs" ino=50820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.652420][T18319] syzkaller0: entered promiscuous mode [ 491.668162][T18319] syzkaller0: entered allmulticast mode [ 491.699111][T18319] tipc: Started in network mode [ 491.716743][T18319] tipc: Node identity eeb2952be39f, cluster identity 4711 [ 491.741462][T18319] tipc: Enabled bearer , priority 0 [ 491.761119][T18318] tipc: Resetting bearer [ 491.773690][T18318] tipc: Disabling bearer [ 491.817494][T18325] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 491.847907][T18328] loop9: detected capacity change from 0 to 512 [ 491.886445][T18328] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.3578: EA inode hash validation failed [ 491.901597][T18328] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.3578: iget: bad extra_isize 90 (inode size 256) [ 491.956765][T18328] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 491.956968][T18328] EXT4-fs (loop9): Remounting filesystem read-only [ 491.966254][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 491.966272][ C0] EXT4-fs (loop9): initial error at time 2000000200: ext4_xattr_inode_iget:441: inode 11 [ 491.966311][ C0] EXT4-fs (loop9): last error at time 2000000200: ext4_xattr_inode_iget:441: inode 11 [ 492.052361][T18328] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -30) [ 492.067524][T18328] EXT4-fs (loop9): 1 orphan inode deleted [ 492.079248][T18328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.118284][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.205320][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.302702][T18343] loop8: detected capacity change from 0 to 512 [ 492.322088][T18343] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 492.339545][T18343] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 492.353010][T18343] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3584: bad orphan inode 4 [ 492.363332][T18343] loop8: lost filesystem error report for type 5 error -117 [ 492.363556][T18343] EXT4-fs (loop8): 1 orphan inode deleted [ 492.371342][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 492.383125][ C1] EXT4-fs (loop8): initial error at time 2000000200: ext4_orphan_get:1417 [ 492.386357][T18343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.391830][ C1] EXT4-fs (loop8): last error at time 2000000200: ext4_orphan_get:1417 [ 493.211486][T18358] Invalid ELF header magic: != ELF [ 493.257982][T18363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3589'. [ 493.267355][T18068] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 493.467569][T18372] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3590'. [ 493.595029][T18374] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 493.845319][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.191271][T18382] FAULT_INJECTION: forcing a failure. [ 494.191271][T18382] name failslab, interval 1, probability 0, space 0, times 0 [ 494.203955][T18382] CPU: 1 UID: 0 PID: 18382 Comm: syz.9.3596 Tainted: G W syzkaller #0 PREEMPT(full) [ 494.203987][T18382] Tainted: [W]=WARN [ 494.203994][T18382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.204008][T18382] Call Trace: [ 494.204077][T18382] [ 494.204087][T18382] __dump_stack+0x1d/0x30 [ 494.204114][T18382] dump_stack_lvl+0x95/0xd0 [ 494.204142][T18382] dump_stack+0x15/0x1b [ 494.204184][T18382] should_fail_ex+0x263/0x280 [ 494.204210][T18382] should_failslab+0x8c/0xb0 [ 494.204233][T18382] kmem_cache_alloc_noprof+0x66/0x400 [ 494.204331][T18382] ? __inet_hash_connect+0x7a0/0x1370 [ 494.204369][T18382] __inet_hash_connect+0x7a0/0x1370 [ 494.204403][T18382] ? __pfx___inet6_check_established+0x10/0x10 [ 494.204517][T18382] inet6_hash_connect+0xaf/0xc0 [ 494.204545][T18382] tcp_v6_connect+0xa32/0xcc0 [ 494.204649][T18382] __inet_stream_connect+0x169/0x7f0 [ 494.204683][T18382] ? _raw_spin_lock_bh+0x56/0xb0 [ 494.204791][T18382] ? _raw_spin_unlock_bh+0x18/0x20 [ 494.204886][T18382] ? lock_sock_nested+0x132/0x160 [ 494.204912][T18382] ? selinux_netlbl_socket_connect+0x114/0x130 [ 494.204942][T18382] inet_stream_connect+0x44/0x70 [ 494.205044][T18382] ? __pfx_inet_stream_connect+0x10/0x10 [ 494.205121][T18382] __sys_connect+0x1f1/0x2a0 [ 494.205158][T18382] __x64_sys_connect+0x3f/0x50 [ 494.205187][T18382] x64_sys_call+0x2df0/0x3020 [ 494.205217][T18382] do_syscall_64+0x12c/0x370 [ 494.205246][T18382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.205296][T18382] RIP: 0033:0x7f0ea2bcc799 [ 494.205313][T18382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.205364][T18382] RSP: 002b:00007f0ea1627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 494.205389][T18382] RAX: ffffffffffffffda RBX: 00007f0ea2e45fa0 RCX: 00007f0ea2bcc799 [ 494.205407][T18382] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 494.205476][T18382] RBP: 00007f0ea1627090 R08: 0000000000000000 R09: 0000000000000000 [ 494.205493][T18382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.205508][T18382] R13: 00007f0ea2e46038 R14: 00007f0ea2e45fa0 R15: 00007ffdcfe75cc8 [ 494.205557][T18382] [ 494.761756][T18362] Set syz1 is full, maxelem 65536 reached [ 494.814796][T18392] xt_hashlimit: size too large, truncated to 1048576 [ 495.067849][T18406] netlink: 'syz.9.3603': attribute type 1 has an invalid length. [ 495.153104][T18406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.370646][T18403] bond3: (slave veth3): Enslaving as an active interface with a down link [ 495.489753][T18413] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 495.659872][T18413] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 497.204603][T18436] loop9: detected capacity change from 0 to 512 [ 497.249145][T18436] EXT4-fs: Ignoring removed bh option [ 497.325711][T18436] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 497.360136][T18436] EXT4-fs (loop9): 1 truncate cleaned up [ 497.377611][T18449] loop2: detected capacity change from 0 to 512 [ 497.471804][T18436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.494413][T18449] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 497.502846][ T28] audit: type=1400 audit(2000000205.880:2767): avc: denied { create } for pid=18444 comm="syz.8.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 497.502904][ T28] audit: type=1400 audit(2000000205.880:2768): avc: denied { ioctl } for pid=18444 comm="syz.8.3615" path="socket:[51054]" dev="sockfs" ino=51054 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 497.512019][T18449] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 497.567308][T18449] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3616: bad orphan inode 4 [ 497.872506][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.928422][T18449] loop2: lost filesystem error report for type 5 error -117 [ 497.929198][T18449] EXT4-fs (loop2): 1 orphan inode deleted [ 497.936646][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 497.936671][ C1] EXT4-fs (loop2): initial error at time 2000000206: ext4_orphan_get:1417 [ 497.936717][ C1] EXT4-fs (loop2): last error at time 2000000206: ext4_orphan_get:1417 [ 498.014757][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 498.022055][T18449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.135187][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3625'. [ 498.144183][T18477] netlink: 'syz.8.3625': attribute type 18 has an invalid length. [ 498.152174][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3625'. [ 498.284084][T18484] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3627'. [ 498.307538][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 498.342761][T18484] veth5: entered promiscuous mode [ 498.356079][T18488] loop8: detected capacity change from 0 to 128 [ 498.679914][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3631'. [ 499.499955][T18503] netlink: 'syz.9.3634': attribute type 4 has an invalid length. [ 499.538478][T18503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=18503 comm=syz.9.3634 [ 500.188352][T18509] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.3634'. [ 500.198843][T18509] netlink: zone id is out of range [ 500.225705][T18509] netlink: zone id is out of range [ 500.234674][T18509] netlink: zone id is out of range [ 500.362510][T18509] netlink: set zone limit has 8 unknown bytes [ 500.514619][T18511] xt_hashlimit: size too large, truncated to 1048576 [ 500.681445][T18448] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 501.546558][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.634684][ T28] audit: type=1400 audit(2000000210.020:2769): avc: denied { connect } for pid=18525 comm="syz.2.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 501.724539][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3641'. [ 501.811582][T18532] loop8: detected capacity change from 0 to 512 [ 501.819475][T18532] EXT4-fs: inline encryption not supported [ 501.830081][T18532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.851567][T18532] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 502.080195][T18532] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 1 [ 502.156903][T18532] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 502.215515][T18539] netlink: 'syz.9.3643': attribute type 10 has an invalid length. [ 502.240199][T18532] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3644: Failed to acquire dquot type 1 [ 502.265603][T18539] netlink: 16154 bytes leftover after parsing attributes in process `syz.9.3643'. [ 502.275399][T18532] loop8: lost filesystem error report for type 5 error -5 [ 502.281345][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 502.295208][ C0] EXT4-fs (loop8): initial error at time 2000000210: ext4_acquire_dquot:7001 [ 502.304246][ C0] EXT4-fs (loop8): last error at time 2000000210: ext4_acquire_dquot:7001 [ 502.313148][T18532] EXT4-fs (loop8): Remounting filesystem read-only [ 502.319711][T18532] EXT4-fs (loop8): 1 truncate cleaned up [ 502.362949][T18532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.388465][T18543] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3646'. [ 502.432393][T18543] loop9: detected capacity change from 0 to 1024 [ 502.460164][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.469967][T18545] loop2: detected capacity change from 0 to 512 [ 502.480111][T18543] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 502.524990][T18549] loop8: detected capacity change from 0 to 1024 [ 502.531504][T18545] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 502.540532][T18543] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 502.550864][T18545] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 502.563941][T18545] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3647: bad orphan inode 4 [ 502.564988][T18543] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 502.585828][T18543] EXT4-fs error (device loop9): ext4_get_journal_inode:5863: inode #5: comm syz.9.3646: unexpected bad inode w/o EXT4_IGET_BAD [ 502.599233][T18543] loop9: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 502.600752][T18545] loop2: lost filesystem error report for type 5 error -117 [ 502.601146][T18543] EXT4-fs (loop9): no journal found [ 502.610025][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 502.610048][ C1] EXT4-fs (loop9): initial error at time 2000000210: ext4_get_journal_inode:5863: inode 5 [ 502.610074][ C1] EXT4-fs (loop9): last error at time 2000000210: ext4_get_journal_inode:5863: inode 5 [ 502.620943][T18545] EXT4-fs (loop2): 1 orphan inode deleted [ 502.622695][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 502.622731][ C0] EXT4-fs (loop2): initial error at time 2000000211: ext4_orphan_get:1417 [ 502.622753][ C0] EXT4-fs (loop2): last error at time 2000000211: ext4_orphan_get:1417 [ 502.624394][T18543] EXT4-fs (loop9): can't get journal size [ 502.631224][T18545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.670427][T18549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.702046][T18543] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.871559][T18555] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.878837][ T9] IPVS: starting estimator thread 0... [ 502.891123][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.904821][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.181468][T18558] IPVS: using max 2304 ests per chain, 115200 per kthread [ 503.528471][T18572] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3656'. [ 503.538891][T18572] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3656'. [ 503.544893][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.616646][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3658'. [ 503.667059][T18587] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 503.864433][T18592] FAULT_INJECTION: forcing a failure. [ 503.864433][T18592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.898289][T18592] CPU: 1 UID: 0 PID: 18592 Comm: syz.2.3663 Tainted: G W syzkaller #0 PREEMPT(full) [ 503.898328][T18592] Tainted: [W]=WARN [ 503.898336][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.898361][T18592] Call Trace: [ 503.898368][T18592] [ 503.898376][T18592] __dump_stack+0x1d/0x30 [ 503.898416][T18592] dump_stack_lvl+0x95/0xd0 [ 503.898574][T18592] dump_stack+0x15/0x1b [ 503.898617][T18592] should_fail_ex+0x263/0x280 [ 503.898643][T18592] should_fail+0xb/0x20 [ 503.898665][T18592] should_fail_usercopy+0x1a/0x20 [ 503.898710][T18592] _copy_to_user+0x20/0xa0 [ 503.898746][T18592] simple_read_from_buffer+0xb5/0x130 [ 503.898771][T18592] sel_read_mls+0x6d/0xa0 [ 503.898799][T18592] ? __pfx_sel_read_mls+0x10/0x10 [ 503.898909][T18592] vfs_readv+0x432/0x6e0 [ 503.898981][T18592] ? __pfx_sel_read_mls+0x10/0x10 [ 503.899018][T18592] __x64_sys_preadv+0xfd/0x1c0 [ 503.899038][T18592] x64_sys_call+0x2915/0x3020 [ 503.899064][T18592] do_syscall_64+0x12c/0x370 [ 503.899120][T18592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.899146][T18592] RIP: 0033:0x7f9f005dc799 [ 503.899165][T18592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.899187][T18592] RSP: 002b:00007f9eff037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 503.899212][T18592] RAX: ffffffffffffffda RBX: 00007f9f00855fa0 RCX: 00007f9f005dc799 [ 503.899236][T18592] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 503.899248][T18592] RBP: 00007f9eff037090 R08: 0000000000000004 R09: 0000000000000000 [ 503.899301][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.899316][T18592] R13: 00007f9f00856038 R14: 00007f9f00855fa0 R15: 00007fff0410fb28 [ 503.899339][T18592] [ 504.117884][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3665'. [ 504.127068][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3665'. [ 504.166185][T18597] veth4: entered allmulticast mode [ 504.199899][T18598] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 504.260755][T18603] loop8: detected capacity change from 0 to 512 [ 504.309779][T18603] EXT4-fs (loop8): 1 orphan inode deleted [ 504.320421][T18603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.336385][ T3617] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 504.359194][T18603] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.371207][ T3617] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 1 [ 504.389292][T18603] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.3667: iget: bad i_size value: -81346268269379574 [ 504.432956][T18615] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3671'. [ 504.454418][T18615] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3671'. [ 504.488574][T18618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.521508][T18618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.621651][T18618] netlink: 'syz.9.3672': attribute type 3 has an invalid length. [ 504.693338][T18624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3674'. [ 504.783486][T18631] netlink: 'syz.1.3676': attribute type 4 has an invalid length. [ 504.791981][T18632] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3675'. [ 504.838394][T18635] netlink: 'syz.1.3676': attribute type 4 has an invalid length. [ 504.839903][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.969070][T18641] xt_hashlimit: size too large, truncated to 1048576 [ 505.013807][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'. [ 505.200915][T18656] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 505.216884][T18659] xt_hashlimit: size too large, truncated to 1048576 [ 505.599819][T18663] loop2: detected capacity change from 0 to 128 [ 505.669320][T18663] msdos: Bad value for 'gid' [ 505.678251][T18682] loop8: detected capacity change from 0 to 512 [ 505.689001][T18682] EXT4-fs: Ignoring removed bh option [ 505.697592][T18663] msdos: Bad value for 'gid' [ 505.754442][T18682] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 505.796035][T18682] EXT4-fs (loop8): 1 truncate cleaned up [ 505.807352][T18682] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.833686][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.338045][ T28] audit: type=1400 audit(2000000217.710:2770): avc: denied { accept } for pid=18705 comm="syz.1.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 509.450941][T18715] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.547999][T18723] 9pnet_fd: Insufficient options for proto=fd [ 509.675929][T18726] loop9: detected capacity change from 0 to 1024 [ 509.698160][T18732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3706'. [ 509.710602][T18726] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 509.761038][T18726] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 509.804782][T18726] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 509.826161][T18734] syzkaller1: entered promiscuous mode [ 509.841962][T18734] syzkaller1: entered allmulticast mode [ 509.899142][T18726] EXT4-fs error (device loop9): ext4_get_journal_inode:5863: inode #5: comm syz.9.3704: unexpected bad inode w/o EXT4_IGET_BAD [ 509.956548][T18726] loop9: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 509.956800][T18726] EXT4-fs (loop9): no journal found [ 509.966018][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 509.966043][ C1] EXT4-fs (loop9): initial error at time 2000000218: ext4_get_journal_inode:5863: inode 5 [ 509.966077][ C1] EXT4-fs (loop9): last error at time 2000000218: ext4_get_journal_inode:5863: inode 5 [ 509.997629][T18726] EXT4-fs (loop9): can't get journal size [ 510.005882][T18726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 510.108999][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.180456][T18747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3712'. [ 510.202110][ T28] audit: type=1400 audit(2000000218.590:2771): avc: denied { bind } for pid=18746 comm="syz.0.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 510.271377][ T28] audit: type=1400 audit(2000000218.630:2772): avc: denied { create } for pid=18752 comm="syz.0.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 510.388446][T18759] 9pnet_fd: Insufficient options for proto=fd [ 510.566242][T18753] lo speed is unknown, defaulting to 1000 [ 510.590237][T18753] lo speed is unknown, defaulting to 1000 [ 511.076956][T18768] loop9: detected capacity change from 0 to 2048 [ 511.105278][T18768] EXT4-fs: Ignoring removed oldalloc option [ 511.281790][T18768] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal [ 511.313822][T18774] Invalid ELF header magic: != ELF [ 512.521491][ T4730] Process accounting resumed [ 513.052053][T18789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18789 comm=syz.9.3724 [ 513.101677][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3724'. [ 513.208586][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3724'. [ 513.479275][T18798] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 513.583033][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3728'. [ 513.673613][T18810] netlink: 'syz.1.3731': attribute type 1 has an invalid length. [ 513.695471][T18810] bond1: entered promiscuous mode [ 513.705318][T18810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.730743][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3731'. [ 513.763955][T18814] netlink: 'syz.1.3732': attribute type 9 has an invalid length. [ 513.771940][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 513.783464][T18814] gretap0: entered promiscuous mode [ 513.788809][T18814] macvlan2: entered promiscuous mode [ 513.794424][T18814] macvlan2: entered allmulticast mode [ 513.799829][T18814] gretap0: entered allmulticast mode [ 513.862706][T18820] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 514.290115][T18828] loop2: detected capacity change from 0 to 1024 [ 514.294279][T18830] syzkaller1: entered promiscuous mode [ 514.302842][T18830] syzkaller1: entered allmulticast mode [ 514.323102][T18828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 514.348661][T18828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.368744][T18828] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 514.471763][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.499713][T18841] xt_hashlimit: size too large, truncated to 1048576 [ 514.507445][T18843] netlink: 'syz.8.3744': attribute type 4 has an invalid length. [ 514.583105][T18843] netlink: 'syz.8.3744': attribute type 4 has an invalid length. [ 514.606937][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3747'. [ 514.652742][T18850] loop9: detected capacity change from 0 to 2048 [ 514.712790][T18856] loop8: detected capacity change from 0 to 512 [ 514.769610][T18856] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 514.780567][T18860] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.797153][T18856] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 514.799511][T18861] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3751'. [ 514.833449][T18863] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.844946][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 514.875280][T18861] geneve0: entered allmulticast mode [ 514.916548][T18856] Invalid ELF header magic: != ELF [ 515.059836][T18860] loop9: detected capacity change from 0 to 128 [ 515.108470][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'. [ 515.158113][T18860] msdos: Bad value for 'gid' [ 515.168486][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'. [ 515.184495][T18860] msdos: Bad value for 'gid' [ 515.219468][T18879] loop2: detected capacity change from 0 to 512 [ 515.312936][T18879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.391460][T18879] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.618874][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.711237][T18892] netlink: 292 bytes leftover after parsing attributes in process `syz.9.3763'. [ 515.834121][T18910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=18910 comm=syz.8.3767 [ 515.856349][T18910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=18910 comm=syz.8.3767 [ 515.896138][T18911] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 515.901061][T18915] netlink: 'syz.2.3771': attribute type 1 has an invalid length. [ 515.923539][T18915] bond0: entered promiscuous mode [ 515.928918][T18915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.005462][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3771'. [ 516.014622][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3771'. [ 516.121832][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3775'. [ 516.263109][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3777'. [ 516.318130][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 516.338173][T18929] openvswitch: netlink: Missing key (keys=40, expected=100) [ 516.437937][T18947] netlink: 'syz.2.3778': attribute type 9 has an invalid length. [ 516.502653][T18947] macvlan4: entered promiscuous mode [ 516.539723][T18947] macvlan4: entered allmulticast mode [ 516.565302][T18949] xt_hashlimit: size too large, truncated to 1048576 [ 517.032611][T18962] rdma_rxe: rxe_newlink: failed to add syz_tun [ 517.745606][T18973] loop9: detected capacity change from 0 to 128 [ 517.765047][T18969] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 517.813615][T18973] msdos: Bad value for 'gid' [ 517.848201][T18973] msdos: Bad value for 'gid' [ 518.475530][ T28] audit: type=1400 audit(2000000226.860:2773): avc: denied { lock } for pid=18988 comm="syz.1.3793" path="socket:[53195]" dev="sockfs" ino=53195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 518.889044][T19013] loop8: detected capacity change from 0 to 128 [ 520.046337][ T28] audit: type=1400 audit(2000000228.390:2774): avc: denied { read } for pid=19012 comm="syz.8.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 520.206545][T19040] __nla_validate_parse: 3 callbacks suppressed [ 520.206608][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3803'. [ 520.390406][T19043] xt_hashlimit: size too large, truncated to 1048576 [ 520.654965][ T28] audit: type=1400 audit(2000000229.040:2775): avc: denied { create } for pid=19053 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 521.304962][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 521.342450][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 521.358918][T19071] netlink: 'syz.2.3810': attribute type 10 has an invalid length. [ 521.479741][T19071] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 521.561475][T19071] team0: Failed to send options change via netlink (err -105) [ 521.591743][T19071] team0: Port device netdevsim1 added [ 521.627875][ T7114] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 521.638423][T19085] netlink: 'syz.9.3812': attribute type 4 has an invalid length. [ 521.655326][T19087] loop8: detected capacity change from 0 to 128 [ 521.663414][T14101] lo speed is unknown, defaulting to 1000 [ 521.672789][T14101] syz2: Port: 1 Link DOWN [ 524.835239][T19123] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.854651][T19124] netlink: 'syz.1.3826': attribute type 1 has an invalid length. [ 524.956641][T19129] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.982846][T19131] syzkaller1: entered promiscuous mode [ 524.988372][T19131] syzkaller1: entered allmulticast mode [ 525.001822][T19134] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 525.109645][T19138] 9pnet_fd: Insufficient options for proto=fd [ 525.316195][T19136] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.328562][T19132] loop2: detected capacity change from 0 to 128 [ 525.384082][T19132] msdos: Bad value for 'gid' [ 525.391451][T19132] msdos: Bad value for 'gid' [ 525.435563][T19142] random: crng reseeded on system resumption [ 525.447729][T19136] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.486051][T19144] loop9: detected capacity change from 0 to 512 [ 525.494535][T19144] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 525.513295][T19144] EXT4-fs (loop9): orphan cleanup on readonly fs [ 525.533734][T19136] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.537651][T19144] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.3833: Block bitmap for bg 0 marked uninitialized [ 525.558604][T19144] loop9: lost filesystem error report for type 5 error -117 [ 525.558807][T19144] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 525.566207][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 525.566254][ C1] EXT4-fs (loop9): initial error at time 2000000233: ext4_read_block_bitmap_nowait:517 [ 525.566278][ C1] EXT4-fs (loop9): last error at time 2000000233: ext4_read_block_bitmap_nowait:517 [ 525.601181][T19144] loop9: lost filesystem error report for type 5 error -117 [ 525.609443][T19149] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3835'. [ 525.617005][T19144] EXT4-fs (loop9): 1 orphan inode deleted [ 525.627890][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'. [ 525.632828][T19144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 525.708520][T19136] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.719909][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.730584][T19149] geneve0: entered allmulticast mode [ 525.791383][T19151] loop2: detected capacity change from 0 to 512 [ 525.800480][T19156] siw: device registration error -23 [ 525.807644][T19151] EXT4-fs: Ignoring removed nobh option [ 525.826640][T19151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 525.842729][ T7114] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.857307][ T7114] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.878033][T19156] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 525.886161][ T7114] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.906575][T19151] EXT4-fs (loop2): 1 truncate cleaned up [ 525.926179][T19151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.928709][T19156] team0: Device vxcan1 is of different type [ 525.964658][ T3646] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.003784][T14800] bridge0: port 2(syz_tun) entered disabled state [ 526.035954][T19164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3840'. [ 526.036795][T14800] syz_tun (unregistering): left allmulticast mode [ 526.069878][T14800] syz_tun (unregistering): left promiscuous mode [ 526.076517][T14800] bridge0: port 2(syz_tun) entered disabled state [ 526.093889][T19164] loop8: detected capacity change from 0 to 2048 [ 526.149347][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.201825][ T3634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.270282][T19181] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 526.296230][T19180] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3847'. [ 526.308736][ T3634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.326971][T19188] loop8: detected capacity change from 0 to 512 [ 526.360644][T19188] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 526.379068][T19188] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 526.393965][ T3634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.427200][T19188] Invalid ELF header magic: != ELF [ 526.454400][T19182] lo speed is unknown, defaulting to 1000 [ 526.529204][T19182] lo speed is unknown, defaulting to 1000 [ 526.582456][ T3634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.728119][T19203] syzkaller0: entered promiscuous mode [ 526.740538][T19203] syzkaller0: entered allmulticast mode [ 526.848363][ T3634] bridge_slave_0: left allmulticast mode [ 526.857585][ T3634] bridge_slave_0: left promiscuous mode [ 526.875988][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.898843][T19208] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3854'. [ 526.953971][T19210] loop9: detected capacity change from 0 to 164 [ 526.976284][T19210] iso9660: Unknown parameter 'noj0000005a099(93' [ 527.014078][ T3634] gretap0 (unregistering): left allmulticast mode [ 527.109224][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.120902][T19223] loop8: detected capacity change from 0 to 512 [ 527.148364][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.168026][ T3634] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 527.181538][T19223] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 527.193509][ T3634] bond0 (unregistering): Released all slaves [ 527.206884][T19223] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 527.236673][ T3634] bond1 (unregistering): Released all slaves [ 527.237840][T19236] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 527.298250][T19238] Cannot find add_set index 0 as target [ 527.440687][T19239] Invalid ELF header magic: != ELF [ 527.464684][T19231] netlink: 'syz.2.3862': attribute type 322 has an invalid length. [ 527.596605][T19252] loop2: detected capacity change from 0 to 512 [ 527.608523][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3867'. [ 527.624744][T19253] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 527.631373][T19253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 527.654355][T19252] EXT4-fs (loop2): bad geometry: block count 65409 exceeds size of device (128 blocks) [ 527.735649][T19253] vhci_hcd vhci_hcd.0: Device attached [ 527.767126][T19264] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(7) [ 527.773674][T19264] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 527.840896][ T3634] hsr_slave_0: left promiscuous mode [ 527.854332][T19264] vhci_hcd vhci_hcd.0: Device attached [ 527.870546][ T3634] hsr_slave_1: left promiscuous mode [ 527.878673][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.887258][T19256] vhci_hcd: connection closed [ 527.887514][ T4513] vhci_hcd vhci_hcd.9: stop threads [ 527.888251][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.895479][T19267] vhci_hcd: connection closed [ 527.897989][ T4513] vhci_hcd vhci_hcd.9: release socket [ 527.915049][ T4513] vhci_hcd vhci_hcd.9: disconnect device [ 527.921101][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.921353][ T1035] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 527.929308][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.942330][ T4513] vhci_hcd vhci_hcd.9: stop threads [ 527.947530][ T4513] vhci_hcd vhci_hcd.9: release socket [ 527.961019][ T4513] vhci_hcd vhci_hcd.9: disconnect device [ 527.968621][ T3634] veth1_macvtap: left promiscuous mode [ 527.987405][ T3634] veth0_macvtap: left promiscuous mode [ 527.993452][ T3634] veth1_vlan: left promiscuous mode [ 527.998763][ T3634] veth0_vlan: left promiscuous mode [ 528.007744][T19286] loop8: detected capacity change from 0 to 4096 [ 528.019030][T19286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.093675][ T3634] team0 (unregistering): Port device team_slave_1 removed [ 528.104564][ T3634] team0 (unregistering): Port device team_slave_0 removed [ 528.144394][T19182] chnl_net:caif_netlink_parms(): no params data found [ 528.498248][T19295] netlink: 'syz.8.3874': attribute type 13 has an invalid length. [ 529.832730][T19298] Invalid ELF header magic: != ELF [ 530.583717][T19295] veth1_vlan: left allmulticast mode [ 530.776746][T19182] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.784177][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.791585][T19182] bridge_slave_0: entered allmulticast mode [ 530.798522][T19182] bridge_slave_0: entered promiscuous mode [ 530.805674][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.816155][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.819279][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.832861][T19182] bridge_slave_1: entered allmulticast mode [ 530.840487][T19182] bridge_slave_1: entered promiscuous mode [ 530.869060][ T4721] syz1: Port: 1 Link DOWN [ 530.883794][ T7114] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.901575][ T7114] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.911481][ T7114] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.919960][ T7114] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.951157][T19182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.962375][T19182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.993877][T19182] team0: Port device team_slave_0 added [ 531.001534][T19182] team0: Port device team_slave_1 added [ 531.020480][T19182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.027555][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.058161][T19182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.075055][T19182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.082378][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.112256][T19182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.228032][T19182] hsr_slave_0: entered promiscuous mode [ 531.246729][T19182] hsr_slave_1: entered promiscuous mode [ 531.253608][T19182] debugfs: 'hsr0' already exists in 'hsr' [ 531.265964][T19182] Cannot create hsr debugfs directory [ 531.322813][T19361] loop8: detected capacity change from 0 to 164 [ 531.329698][T19361] iso9660: Bad value for 'uid' [ 531.369044][T19364] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3888'. [ 531.398464][T19364] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3888'. [ 531.414008][T19362] loop2: detected capacity change from 0 to 512 [ 531.420375][T19361] iso9660: Bad value for 'uid' [ 531.457535][T19362] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 531.541821][T19362] EXT4-fs (loop2): orphan cleanup on readonly fs [ 531.577862][T19362] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3885: bad orphan inode 17 [ 531.598946][T19376] syzkaller0: entered promiscuous mode [ 531.607021][T19376] syzkaller0: entered allmulticast mode [ 531.641663][T19362] loop2: lost filesystem error report for type 5 error -117 [ 531.642653][T19362] ext4_test_bit(bit=16, block=4) = 1 [ 531.655302][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 531.655323][ C1] EXT4-fs (loop2): initial error at time 2000000240: ext4_orphan_get:1417 [ 531.655353][ C1] EXT4-fs (loop2): last error at time 2000000240: ext4_orphan_get:1417 [ 531.699248][T19362] is_bad_inode(inode)=0 [ 531.709717][T19362] NEXT_ORPHAN(inode)=0 [ 531.719478][T19362] max_ino=32 [ 531.729667][T19362] i_nlink=1 [ 531.740237][T19362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 532.205042][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3898'. [ 532.244836][T19411] loop8: detected capacity change from 0 to 512 [ 532.294870][T19411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.340230][T19411] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.390850][T19411] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.3900: corrupted inode contents [ 532.431928][T19411] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.3900: mark_inode_dirty error [ 532.477382][T19411] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.3900: corrupted inode contents [ 532.533157][T19411] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3900: mark_inode_dirty error [ 532.638462][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.772784][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.803734][T19182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.813036][T19182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.829969][T19182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.847688][T19182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 533.137251][T19182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.519548][T19182] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.635736][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.642851][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.764617][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.771799][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.159077][T19451] loop8: detected capacity change from 0 to 512 [ 534.184126][T19182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.321618][T19451] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 534.357335][T19182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.381777][T19451] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 534.435516][T19451] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3906: bad orphan inode 4 [ 534.487962][T19463] xt_hashlimit: size too large, truncated to 1048576 [ 534.503537][T19451] loop8: lost filesystem error report for type 5 error -117 [ 534.504609][T19451] EXT4-fs (loop8): 1 orphan inode deleted [ 534.511948][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 534.511969][ C0] EXT4-fs (loop8): initial error at time 2000000498: ext4_orphan_get:1417 [ 534.512009][ C0] EXT4-fs (loop8): last error at time 2000000498: ext4_orphan_get:1417 [ 534.659049][T19182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.694986][T19451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.487637][T19182] veth0_vlan: entered promiscuous mode [ 535.515627][T19182] veth1_vlan: entered promiscuous mode [ 535.548294][T19520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 535.554044][T19182] veth0_macvtap: entered promiscuous mode [ 535.587663][T19520] block device autoloading is deprecated and will be removed. [ 535.598176][T19182] veth1_macvtap: entered promiscuous mode [ 535.624251][T19182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.650302][T19182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.694785][ T3638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.711362][ T3638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.880291][ T3638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.901395][ T3638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.961660][T19458] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 536.597398][ T28] audit: type=1400 audit(2000000500.961:2776): avc: denied { map } for pid=19548 comm="syz.9.3916" path="/270" dev="tmpfs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 536.701384][ T28] audit: type=1400 audit(2000000500.961:2777): avc: denied { execute } for pid=19548 comm="syz.9.3916" path="/270" dev="tmpfs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 536.793923][T19567] loop9: detected capacity change from 0 to 512 [ 536.806938][T19567] EXT4-fs: Ignoring removed mblk_io_submit option [ 537.070780][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.122125][T19567] EXT4-fs (loop9): orphan cleanup on readonly fs [ 537.152073][T19567] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 537.206255][T19567] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3919: attempt to clear invalid blocks 2 len 1 [ 537.261593][T19567] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 537.268653][T19567] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, [ 537.277834][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 537.277863][ C0] EXT4-fs (loop9): initial error at time 2000000501: ext4_clear_blocks:876: inode 13 [ 537.277892][ C0] EXT4-fs (loop9): last error at time 2000000501: ext4_clear_blocks:876: inode 13 [ 537.311474][T19567] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 537.333112][T19567] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3919: invalid indirect mapped block 1819239214 (level 0) [ 537.361447][T19567] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 537.361675][T19567] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3919: invalid indirect mapped block 1819239214 (level 1) [ 537.430748][T19567] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 537.431230][T19567] EXT4-fs (loop9): 1 truncate cleaned up [ 537.453575][T19567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.489490][ T28] audit: type=1400 audit(2000000501.861:2778): avc: denied { watch watch_reads } for pid=19561 comm="syz.9.3919" path="/271/file0" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.620185][T19593] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3924'. [ 537.648943][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.690280][T19604] loop9: detected capacity change from 0 to 1024 [ 537.719332][T19604] EXT4-fs: Ignoring removed bh option [ 537.763744][T19604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 537.795217][T19604] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.857995][T19619] loop5: detected capacity change from 0 to 512 [ 537.915548][T19619] EXT4-fs: inline encryption not supported [ 537.924498][T13833] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /272/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 537.956324][T19619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.966386][T19619] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 538.001396][T13833] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /272/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 538.011764][T19619] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 1 [ 538.037997][T19619] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 538.041977][T13833] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 538.056689][T19619] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3928: Failed to acquire dquot type 1 [ 538.078504][T19619] loop5: lost filesystem error report for type 5 error -5 [ 538.080622][T19619] EXT4-fs (loop5): Remounting filesystem read-only [ 538.087766][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 538.087783][ C0] EXT4-fs (loop5): initial error at time 2000000502: ext4_acquire_dquot:7001 [ 538.087803][ C0] EXT4-fs (loop5): last error at time 2000000502: ext4_acquire_dquot:7001 [ 538.118542][T19619] EXT4-fs (loop5): 1 truncate cleaned up [ 538.125252][T19619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.144968][T13833] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /272/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 538.167642][T19640] loop8: detected capacity change from 0 to 512 [ 538.201759][T13833] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 538.226470][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.235517][T19640] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 538.258704][T19640] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 538.277806][T19656] loop5: detected capacity change from 0 to 512 [ 538.302078][T13833] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /272/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 538.343708][T19656] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 538.360503][T13833] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 538.385317][T19656] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 538.410648][T13833] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /272/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 538.411062][T19663] Invalid ELF header magic: != ELF [ 538.441584][T19656] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3934: bad orphan inode 4 [ 538.458006][T13833] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 538.467377][T19656] loop5: lost filesystem error report for type 5 error -117 [ 538.478786][T13833] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /272/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 538.511309][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 538.517885][ C0] EXT4-fs (loop5): initial error at time 2000000502: ext4_orphan_get:1417 [ 538.526449][ C0] EXT4-fs (loop5): last error at time 2000000502: ext4_orphan_get:1417 [ 538.535241][T19656] EXT4-fs (loop5): 1 orphan inode deleted [ 538.571997][T19656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.378532][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.439948][ T3634] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 539.491315][ T3634] EXT4-fs (loop9): This should not happen!! Data will be lost [ 539.491315][ T3634] [ 539.521837][T13833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 539.665560][T19711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=19711 comm=syz.2.3944 [ 539.738636][ T3642] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.040550][ T3642] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.104739][T19728] loop8: detected capacity change from 0 to 512 [ 540.134923][T19731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=19731 comm=syz.1.3942 [ 540.165217][ T3642] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.169025][T19728] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 540.207292][T19740] syzkaller1: entered promiscuous mode [ 540.221424][T19740] syzkaller1: entered allmulticast mode [ 540.235659][ T3642] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.242370][T19728] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 540.293843][T19714] lo speed is unknown, defaulting to 1000 [ 540.302897][T19714] lo speed is unknown, defaulting to 1000 [ 540.330462][T19748] loop5: detected capacity change from 0 to 512 [ 540.351180][T19748] EXT4-fs: Ignoring removed bh option [ 540.408398][T19748] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 540.429026][ T3642] bridge_slave_1: left allmulticast mode [ 540.438037][ T3642] bridge_slave_1: left promiscuous mode [ 540.438032][T19748] EXT4-fs (loop5): 1 truncate cleaned up [ 540.438605][T19748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.451540][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.475594][T19763] Invalid ELF header magic: != ELF [ 540.506268][ T3642] bridge_slave_0: left allmulticast mode [ 540.521694][ T3642] bridge_slave_0: left promiscuous mode [ 540.540681][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.593418][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.741030][ T3642] gretap0 (unregistering): left allmulticast mode [ 541.487399][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.030874][ T3642] bond0 (unregistering): Released all slaves [ 542.050378][ T3642] bond1 (unregistering): Released all slaves [ 542.564977][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'. [ 542.856689][T19823] loop8: detected capacity change from 0 to 512 [ 542.864851][ T3642] bond2 (unregistering): Released all slaves [ 542.889624][T19823] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.902628][ T3642] bond3 (unregistering): (slave veth3): Releasing active interface [ 542.910838][T19823] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 542.925082][ T3642] bond3 (unregistering): Released all slaves [ 543.434410][T19852] Invalid ELF header magic: != ELF [ 544.031571][ T3642] hsr_slave_0: left promiscuous mode [ 544.037863][ T3642] hsr_slave_1: left promiscuous mode [ 544.047779][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.078582][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.102045][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.131562][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.150935][T19859] syz1: rxe_newlink: already configured on syz_tun [ 544.180721][ T3642] veth1_macvtap: left promiscuous mode [ 544.202428][ T3642] veth0_macvtap: left promiscuous mode [ 544.210213][T19863] netlink: 'syz.1.3973': attribute type 9 has an invalid length. [ 544.230435][ T3642] veth1_vlan: left promiscuous mode [ 544.243901][ T3642] veth0_vlan: left promiscuous mode [ 544.251467][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3973'. [ 545.133400][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 545.152890][T19881] loop2: detected capacity change from 0 to 512 [ 545.169833][T19881] EXT4-fs: Ignoring removed bh option [ 545.176489][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 545.194180][T19881] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 545.236079][T19881] EXT4-fs (loop2): 1 truncate cleaned up [ 545.244395][T19881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.279830][T19881] FAULT_INJECTION: forcing a failure. [ 545.279830][T19881] name failslab, interval 1, probability 0, space 0, times 0 [ 545.311737][T19863] macvlan3: entered promiscuous mode [ 545.317257][T19863] macvlan3: entered allmulticast mode [ 545.349985][T19881] CPU: 0 UID: 0 PID: 19881 Comm: syz.2.3978 Tainted: G W syzkaller #0 PREEMPT(full) [ 545.350023][T19881] Tainted: [W]=WARN [ 545.350032][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.350046][T19881] Call Trace: [ 545.350054][T19881] [ 545.350062][T19881] __dump_stack+0x1d/0x30 [ 545.350088][T19881] dump_stack_lvl+0x95/0xd0 [ 545.350109][T19881] dump_stack+0x15/0x1b [ 545.350129][T19881] should_fail_ex+0x263/0x280 [ 545.350159][T19881] should_failslab+0x8c/0xb0 [ 545.350181][T19881] kmem_cache_alloc_noprof+0x66/0x400 [ 545.350202][T19881] ? vm_area_dup+0x33/0x2c0 [ 545.350225][T19881] vm_area_dup+0x33/0x2c0 [ 545.350247][T19881] __split_vma+0xe9/0x640 [ 545.350270][T19881] ? mas_find+0x5d5/0x700 [ 545.350295][T19881] vms_gather_munmap_vmas+0x2bc/0x850 [ 545.350335][T19881] mmap_region+0x718/0x2050 [ 545.350360][T19881] ? selinux_file_open+0x2e6/0x330 [ 545.350406][T19881] do_mmap+0x9b2/0xbd0 [ 545.350436][T19881] vm_mmap_pgoff+0x183/0x2d0 [ 545.350460][T19881] ksys_mmap_pgoff+0xc1/0x310 [ 545.350482][T19881] ? __x64_sys_mmap+0x49/0x70 [ 545.350501][T19881] x64_sys_call+0x14df/0x3020 [ 545.350529][T19881] do_syscall_64+0x12c/0x370 [ 545.350560][T19881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.350584][T19881] RIP: 0033:0x7f9f005dc799 [ 545.350601][T19881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.350620][T19881] RSP: 002b:00007f9eff037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 545.350639][T19881] RAX: ffffffffffffffda RBX: 00007f9f00855fa0 RCX: 00007f9f005dc799 [ 545.350652][T19881] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 545.350666][T19881] RBP: 00007f9eff037090 R08: ffffffffffffffff R09: 00000000ec776000 [ 545.350679][T19881] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 545.350691][T19881] R13: 00007f9f00856038 R14: 00007f9f00855fa0 R15: 00007fff0410fb28 [ 545.350708][T19881] [ 545.699140][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3981'. [ 545.734909][T19714] chnl_net:caif_netlink_parms(): no params data found [ 545.763062][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.811011][T19893] loop8: detected capacity change from 0 to 2048 [ 545.880441][ T28] audit: type=1326 audit(2000000510.201:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfe9ac799 code=0x7ffc0000 [ 545.911239][T19714] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.918518][T19714] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.925957][T19714] bridge_slave_0: entered allmulticast mode [ 545.932250][ T28] audit: type=1326 audit(2000000510.201:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfe9ac799 code=0x7ffc0000 [ 545.956654][T19714] bridge_slave_0: entered promiscuous mode [ 545.964292][T19714] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.971835][T19714] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.988710][T19714] bridge_slave_1: entered allmulticast mode [ 545.997553][T19714] bridge_slave_1: entered promiscuous mode [ 546.026203][ T28] audit: type=1326 audit(2000000510.201:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbbfe9ac799 code=0x7ffc0000 [ 546.033759][T19912] loop2: detected capacity change from 0 to 512 [ 546.081934][T19714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.101785][T19912] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.113061][T19714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.130331][ T28] audit: type=1326 audit(2000000510.201:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfe9ac799 code=0x7ffc0000 [ 546.145779][T19912] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 546.237880][ T28] audit: type=1326 audit(2000000510.201:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfe9ac799 code=0x7ffc0000 [ 546.287760][T19925] Invalid ELF header magic: != ELF [ 546.294897][T19714] team0: Port device team_slave_0 added [ 546.312640][T19714] team0: Port device team_slave_1 added [ 546.411099][T19714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.426230][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.486057][T19714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.507593][T19714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.527154][T19938] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 546.544683][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.619217][T19714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.671941][T19714] hsr_slave_0: entered promiscuous mode [ 546.696595][T19714] hsr_slave_1: entered promiscuous mode [ 546.715925][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3990'. [ 546.716702][T19714] debugfs: 'hsr0' already exists in 'hsr' [ 546.730938][T19714] Cannot create hsr debugfs directory [ 546.737029][T19955] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.744430][T19955] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.762136][T19938] loop2: detected capacity change from 0 to 128 [ 546.943385][T19714] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.977196][T19969] xt_hashlimit: size too large, truncated to 1048576 [ 547.124237][T19714] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.195050][T19714] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.253277][T19714] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.311848][T19990] loop5: detected capacity change from 0 to 512 [ 547.367318][T19714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.385664][T19714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.440976][T19714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 547.482536][T19714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 547.518010][T19996] loop8: detected capacity change from 0 to 512 [ 547.546404][T19996] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 547.569056][T19996] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 547.611479][T19990] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 547.625139][T19990] EXT4-fs (loop5): orphan cleanup on readonly fs [ 547.635396][T19990] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3995: bad orphan inode 17 [ 547.648632][T19990] loop5: lost filesystem error report for type 5 error -117 [ 547.648740][T19990] ext4_test_bit(bit=16, block=4) = 1 [ 547.656145][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 547.656163][ C0] EXT4-fs (loop5): initial error at time 2000000512: ext4_orphan_get:1417 [ 547.656185][ C0] EXT4-fs (loop5): last error at time 2000000512: ext4_orphan_get:1417 [ 547.693277][T19990] is_bad_inode(inode)=0 [ 547.700195][T19990] NEXT_ORPHAN(inode)=0 [ 547.707452][T19990] max_ino=32 [ 547.710753][T19990] i_nlink=1 [ 547.714337][T19990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 547.771010][T20005] Invalid ELF header magic: != ELF [ 547.868523][T19714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.920512][T19714] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.942202][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.949530][ T3642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.991678][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.998857][ T3642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.027634][T20020] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 549.449825][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.868468][T20073] loop2: detected capacity change from 0 to 512 [ 551.897100][T20073] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.936113][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.961457][T20073] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 551.998469][T20085] netlink: 'syz.5.4010': attribute type 9 has an invalid length. [ 552.048548][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4010'. [ 552.079294][T20073] Invalid ELF header magic: != ELF [ 552.111270][T20085] gretap0: entered promiscuous mode [ 552.118123][T20064] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4006'. [ 552.129439][T20085] macvlan2: entered promiscuous mode [ 552.135175][T20085] macvlan2: entered allmulticast mode [ 552.140594][T20085] gretap0: entered allmulticast mode [ 552.164595][T19714] veth0_vlan: entered promiscuous mode [ 552.200506][T19714] veth1_vlan: entered promiscuous mode [ 552.223028][T20104] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4012'. [ 552.236823][T19714] veth0_macvtap: entered promiscuous mode [ 552.264331][T19714] veth1_macvtap: entered promiscuous mode [ 552.280185][T20104] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4012'. [ 552.288339][T19714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.309915][T19714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.335312][ T7113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.344612][ T7113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.382822][ T7113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.392054][T20112] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 552.403664][ T7113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.491856][T20116] loop8: detected capacity change from 0 to 512 [ 552.540972][T20114] loop5: detected capacity change from 0 to 128 [ 552.554383][T20116] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.640182][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3946'. [ 552.660926][T20116] xt_connbytes: Forcing CT accounting to be enabled [ 552.728307][T20148] lo speed is unknown, defaulting to 1000 [ 552.753862][T20152] loop6: detected capacity change from 0 to 256 [ 552.797542][T20152] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 552.846393][T20152] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 553.025123][T20153] lo speed is unknown, defaulting to 1000 [ 553.061022][T20166] Invalid ELF header magic: != ELF [ 553.178773][T20176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4024'. [ 553.202715][T20170] loop6: detected capacity change from 0 to 2048 [ 553.420094][T20181] netlink: 'syz.2.4027': attribute type 1 has an invalid length. [ 553.497391][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4027'. [ 553.588145][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4027'. [ 553.637500][T20181] bond1: entered promiscuous mode [ 553.702970][T20181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.722411][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4029'. [ 553.756772][T20192] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 553.834292][T20192] batman_adv: batadv0: Adding interface: ip6gretap1 [ 553.868490][T20192] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.936411][T20192] batman_adv: batadv0: Interface activated: ip6gretap1 [ 553.946564][T20202] bridge0: left allmulticast mode [ 554.121576][T20214] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4032'. [ 554.158467][T20216] loop5: detected capacity change from 0 to 512 [ 554.254924][T20216] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 554.296748][T20216] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 554.330815][T20228] syzkaller1: entered promiscuous mode [ 554.351447][T20228] syzkaller1: entered allmulticast mode [ 554.357879][T20233] loop2: detected capacity change from 0 to 512 [ 554.419307][T20216] Invalid ELF header magic: != ELF [ 554.436760][T20233] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 554.585428][T20233] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 554.636332][T20233] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4038: bad orphan inode 4 [ 554.674354][T20233] loop2: lost filesystem error report for type 5 error -117 [ 554.674593][T20233] EXT4-fs (loop2): 1 orphan inode deleted [ 554.682117][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 554.682137][ C1] EXT4-fs (loop2): initial error at time 2000000519: ext4_orphan_get:1417 [ 554.682183][ C1] EXT4-fs (loop2): last error at time 2000000519: ext4_orphan_get:1417 [ 554.905130][T20233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.135462][ T28] audit: type=1400 audit(2000000519.501:2784): avc: denied { lock } for pid=20241 comm="syz.5.4040" path="socket:[58119]" dev="sockfs" ino=58119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 556.193795][T20248] tmpfs: Bad value for 'mpol' [ 557.182785][ T28] audit: type=1400 audit(2000000521.561:2785): avc: denied { write } for pid=20258 comm="syz.8.4044" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 557.522296][T20272] syz_tun: entered promiscuous mode [ 557.543264][T20272] macsec1: entered allmulticast mode [ 557.548670][T20272] syz_tun: entered allmulticast mode [ 557.565851][T20237] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 557.595944][T20272] syz_tun: left allmulticast mode [ 557.601046][T20272] syz_tun: left promiscuous mode [ 557.609931][T20276] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 557.637369][T20274] Invalid ELF header magic: != ELF [ 557.661037][T20276] loop8: detected capacity change from 0 to 128 [ 557.764045][T20285] loop6: detected capacity change from 0 to 512 [ 557.861037][T20285] EXT4-fs (loop6): 1 orphan inode deleted [ 557.881613][ T7107] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 557.914733][T20285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.955282][ T7107] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 1 [ 557.997017][T20285] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.032251][T20297] GUP no longer grows the stack in syz.1.4056 (20297): 200000004000-20000000a000 (200000002000) [ 558.050746][T20285] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.4053: iget: bad i_size value: -81346268269379574 [ 558.073767][T20297] CPU: 0 UID: 0 PID: 20297 Comm: syz.1.4056 Tainted: G W syzkaller #0 PREEMPT(full) [ 558.073820][T20297] Tainted: [W]=WARN [ 558.073829][T20297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.073867][T20297] Call Trace: [ 558.073874][T20297] [ 558.073883][T20297] __dump_stack+0x1d/0x30 [ 558.073915][T20297] dump_stack_lvl+0x95/0xd0 [ 558.073981][T20297] dump_stack+0x15/0x1b [ 558.074008][T20297] __get_user_pages+0x195b/0x1ea0 [ 558.074044][T20297] ? xfd_validate_state+0x45/0xf0 [ 558.074197][T20297] ? __rcu_read_unlock+0x4e/0x70 [ 558.074224][T20297] get_user_pages_remote+0x1d5/0x6b0 [ 558.074266][T20297] __access_remote_vm+0x15c/0x580 [ 558.074373][T20297] access_remote_vm+0x32/0x40 [ 558.074409][T20297] proc_pid_cmdline_read+0x32b/0x6b0 [ 558.074522][T20297] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 558.074599][T20297] vfs_readv+0x432/0x6e0 [ 558.074661][T20297] __x64_sys_preadv+0xfd/0x1c0 [ 558.074684][T20297] x64_sys_call+0x2915/0x3020 [ 558.074742][T20297] do_syscall_64+0x12c/0x370 [ 558.074769][T20297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.074793][T20297] RIP: 0033:0x7fbbfe9ac799 [ 558.074810][T20297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.074883][T20297] RSP: 002b:00007fbbfd407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 558.074906][T20297] RAX: ffffffffffffffda RBX: 00007fbbfec25fa0 RCX: 00007fbbfe9ac799 [ 558.074923][T20297] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 558.074937][T20297] RBP: 00007fbbfea42c99 R08: 00000000fffffff9 R09: 0000000000000000 [ 558.074988][T20297] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 558.075053][T20297] R13: 00007fbbfec26038 R14: 00007fbbfec25fa0 R15: 00007ffc498c4a48 [ 558.075073][T20297] [ 558.421852][T14466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.644501][T20309] loop2: detected capacity change from 0 to 512 [ 558.679793][T20304] __nla_validate_parse: 4 callbacks suppressed [ 558.679812][T20304] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4059'. [ 558.701584][T20309] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 558.710722][T20309] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 558.757313][T20315] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 558.789737][T20309] Invalid ELF header magic: != ELF [ 558.817414][ T28] audit: type=1326 audit(2000000523.181:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 558.841687][ T28] audit: type=1326 audit(2000000523.181:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 558.867702][ T28] audit: type=1326 audit(2000000523.181:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 558.908316][T19714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.944437][ T28] audit: type=1326 audit(2000000523.181:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 559.008336][ T28] audit: type=1326 audit(2000000523.181:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 559.047773][T20319] loop5: detected capacity change from 0 to 128 [ 559.062386][ T28] audit: type=1326 audit(2000000523.181:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 559.091863][T20319] msdos: Bad value for 'gid' [ 559.120221][T20319] msdos: Bad value for 'gid' [ 559.130285][ T28] audit: type=1326 audit(2000000523.181:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20303 comm="syz.8.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7e6ec799 code=0x7ffc0000 [ 559.611766][T20346] vhci_hcd vhci_hcd.0: invalid port number 14 [ 559.617996][T20346] vhci_hcd vhci_hcd.0: default hub control req: 1f17 v0000 i000e l0 [ 559.654108][T20346] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 559.847616][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4080'. [ 559.925532][T20376] loop6: detected capacity change from 0 to 8192 [ 559.932460][T20376] vfat: Unknown parameter '0x0000000000000000ÿÿ0x0000000000000000' [ 560.012025][T20376] loop6: detected capacity change from 0 to 512 [ 560.025943][T20378] loop8: detected capacity change from 0 to 8192 [ 560.034720][T20376] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 560.050620][T20376] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 560.064834][T20378] vfat: Unknown parameter '0x0000000000000000ÿÿ0x0000000000000000' [ 560.072312][T20376] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4083: Corrupt directory, running e2fsck is recommended [ 560.090467][T20378] loop8: detected capacity change from 0 to 512 [ 560.118521][T20376] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 560.140338][T20378] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 560.152067][T20376] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.4083: corrupted in-inode xattr: e_name out of bounds [ 560.171372][T20378] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 560.185911][T20376] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 560.186888][T20376] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4083: couldn't read orphan inode 15 (err -117) [ 560.196367][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 560.196390][ C0] EXT4-fs (loop6): initial error at time 2000000524: ext4_iget_extra_inode:5025: inode 15 [ 560.196423][ C0] EXT4-fs (loop6): last error at time 2000000524: ext4_iget_extra_inode:5025: inode 15 [ 560.239791][T20378] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4084: Corrupt directory, running e2fsck is recommended [ 560.264358][T20378] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 560.273098][T20378] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.4084: corrupted in-inode xattr: e_name out of bounds [ 560.287539][T20378] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 560.287735][T20378] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4084: couldn't read orphan inode 15 (err -117) [ 560.297002][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 560.297022][ C0] EXT4-fs (loop8): initial error at time 2000000524: ext4_iget_extra_inode:5025: inode 15 [ 560.297056][ C0] EXT4-fs (loop8): last error at time 2000000524: ext4_iget_extra_inode:5025: inode 15 [ 560.332435][T20376] loop6: lost filesystem error report for type 5 error -117 [ 560.335666][T20378] loop8: lost filesystem error report for type 5 error -117 [ 560.336062][T20376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.346888][T20378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.481410][T20382] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 560.992883][T20388] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 561.004829][T20388] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 561.014962][T20388] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4083: Corrupt directory, running e2fsck is recommended [ 561.031492][T20388] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4083'. [ 561.046038][T20392] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 561.048539][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 561.048557][ T28] audit: type=1400 audit(2000000525.351:2803): avc: denied { kexec_image_load } for pid=20375 comm="syz.6.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 561.058117][T20392] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 561.094937][T20392] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4084: Corrupt directory, running e2fsck is recommended [ 561.103922][T20378] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4084'. [ 561.190578][T19714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.289499][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.300043][T20402] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4091'. [ 561.340722][T20395] loop5: detected capacity change from 0 to 128 [ 561.341893][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 561.365117][T20405] loop6: detected capacity change from 0 to 512 [ 561.371953][T20405] EXT4-fs: Ignoring removed nobh option [ 561.393243][T20405] EXT4-fs (loop6): 1 orphan inode deleted [ 561.399730][T20405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.400324][T20395] msdos: Bad value for 'gid' [ 561.422165][T20395] msdos: Bad value for 'gid' [ 561.593661][T20413] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 561.605890][T20415] netlink: 'syz.5.4096': attribute type 1 has an invalid length. [ 561.648203][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4096'. [ 561.679781][T20415] bond1: entered promiscuous mode [ 561.692560][T20415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.715399][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4088'. [ 561.995789][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4098'. [ 562.009915][T20425] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 562.039448][T20425] EXT4-fs (loop5): orphan cleanup on readonly fs [ 562.067909][T19714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.088673][T20425] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4097: bad orphan inode 17 [ 562.101498][T20425] loop5: lost filesystem error report for type 5 error -117 [ 562.104434][T20425] ext4_test_bit(bit=16, block=4) = 1 [ 562.111819][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 562.111838][ C0] EXT4-fs (loop5): initial error at time 2000000526: ext4_orphan_get:1417 [ 562.111871][ C0] EXT4-fs (loop5): last error at time 2000000526: ext4_orphan_get:1417 [ 562.142931][T20425] is_bad_inode(inode)=0 [ 562.147209][T20425] NEXT_ORPHAN(inode)=0 [ 562.151830][T20425] max_ino=32 [ 562.155185][T20425] i_nlink=1 [ 562.158732][T20425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 562.473910][T20452] vfat: Unknown parameter '0x0000000000000000ÿÿ0x0000000000000000' [ 562.505273][T20452] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 562.529414][T20452] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 562.540815][T20452] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4102: Corrupt directory, running e2fsck is recommended [ 562.559277][T20452] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 562.577259][T20452] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.4102: corrupted in-inode xattr: e_name out of bounds [ 562.599648][T20452] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.599830][T20452] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4102: couldn't read orphan inode 15 (err -117) [ 562.609137][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 562.609165][ C0] EXT4-fs (loop8): initial error at time 2000000526: ext4_iget_extra_inode:5025: inode 15 [ 562.609212][ C0] EXT4-fs (loop8): last error at time 2000000526: ext4_iget_extra_inode:5025: inode 15 [ 562.644447][T20428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.663987][ T4507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.667107][T20452] loop8: lost filesystem error report for type 5 error -117 [ 562.686639][T20452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.718860][T20428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.786602][ T4507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.866845][ T4507] team0: Port device netdevsim1 removed [ 562.882962][ T4507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.954883][ T4507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.002699][T20470] lo speed is unknown, defaulting to 1000 [ 563.064173][T20480] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 563.075817][T20480] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 563.086151][T20480] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4102: Corrupt directory, running e2fsck is recommended [ 563.101398][T20480] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4102'. [ 563.160023][ T4507] vlan2: left promiscuous mode [ 563.165833][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.168629][ T4507] bridge0: port 3(vlan2) entered disabled state [ 563.182681][ T4507] bridge_slave_1: left allmulticast mode [ 563.193978][ T4507] bridge_slave_1: left promiscuous mode [ 563.204001][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.220584][ T4507] bridge_slave_0: left promiscuous mode [ 563.242915][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.338779][ T4507] gretap0 (unregistering): left allmulticast mode [ 563.410937][ T28] audit: type=1400 audit(2000000527.781:2804): avc: denied { ioctl } for pid=20491 comm="syz.1.4109" path="socket:[58649]" dev="sockfs" ino=58649 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 563.476264][ T4507] bond0 (unregistering): Released all slaves [ 563.491604][ T4507] bond1 (unregistering): Released all slaves [ 563.619765][ T4507] hsr_slave_0: left promiscuous mode [ 563.629075][ T4507] hsr_slave_1: left promiscuous mode [ 563.639506][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.654317][T20501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 563.664721][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.675554][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.684367][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.697962][ T4507] veth1_macvtap: left promiscuous mode [ 563.704609][ T4507] veth0_macvtap: left promiscuous mode [ 563.710286][ T4507] veth1_vlan: left promiscuous mode [ 563.716945][ T4507] veth0_vlan: left promiscuous mode [ 563.827098][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.888263][ T4507] team0 (unregistering): Port device team_slave_1 removed [ 563.909502][T20526] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4112'. [ 563.910260][ T4507] team0 (unregistering): Port device team_slave_0 removed [ 563.999218][T20544] batadv0: entered promiscuous mode [ 564.005443][T20544] bond0: entered promiscuous mode [ 564.011522][T20544] hsr2: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 564.021619][T20544] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 564.041563][T20544] hsr2: entered allmulticast mode [ 564.047103][T20544] batadv0: entered allmulticast mode [ 564.054066][T20544] bond0: entered allmulticast mode [ 564.059533][T20544] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 564.074038][T20470] chnl_net:caif_netlink_parms(): no params data found [ 564.169330][T20470] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.177239][T20470] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.196137][T20470] bridge_slave_0: entered allmulticast mode [ 564.215911][T20470] bridge_slave_0: entered promiscuous mode [ 564.237529][T20470] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.249965][T20470] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.264636][T20470] bridge_slave_1: entered allmulticast mode [ 564.276175][T20470] bridge_slave_1: entered promiscuous mode [ 564.314378][T20470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.326226][T20470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.362061][T20470] team0: Port device team_slave_0 added [ 564.375361][T20470] team0: Port device team_slave_1 added [ 564.467971][T20470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.515189][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.561394][T20470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.658599][T20633] set_capacity_and_notify: 3 callbacks suppressed [ 564.658677][T20633] loop6: detected capacity change from 0 to 1024 [ 564.698761][T20470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.706408][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.706564][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4116'. [ 564.732783][T20470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.741797][T20633] EXT4-fs: dax option not supported [ 564.784118][T20621] bond2: option lacp_active: invalid value (5) [ 564.851371][T20621] bond2 (unregistering): Released all slaves [ 564.909401][T20648] netlink: 'syz.6.4120': attribute type 83 has an invalid length. [ 564.920620][T20470] hsr_slave_0: entered promiscuous mode [ 564.936368][T20470] hsr_slave_1: entered promiscuous mode [ 564.950789][T20470] debugfs: 'hsr0' already exists in 'hsr' [ 564.970647][T20648] loop6: detected capacity change from 0 to 512 [ 564.986558][T20470] Cannot create hsr debugfs directory [ 565.010908][T20648] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4120: inode has both inline data and extents flags [ 565.031482][T20648] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.031672][T20648] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4120: couldn't read orphan inode 15 (err -117) [ 565.053092][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 565.053110][ C0] EXT4-fs (loop6): initial error at time 2000000529: ext4_orphan_get:1391: inode 15 [ 565.053146][ C0] EXT4-fs (loop6): last error at time 2000000529: ext4_orphan_get:1391: inode 15 [ 565.078477][T20648] loop6: lost filesystem error report for type 5 error -117 [ 565.079042][T20648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 565.099672][T20648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 565.165150][T20656] loop5: detected capacity change from 0 to 512 [ 565.199856][T20656] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 565.228891][T20656] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 565.343452][T20656] Invalid ELF header magic: != ELF [ 565.539577][T20673] loop5: detected capacity change from 0 to 764 [ 565.576436][T20673] iso9660: Unknown parameter 'overm' [ 565.841065][T20673] macvtap1: entered promiscuous mode [ 565.849030][T20673] macvtap1: entered allmulticast mode [ 565.861225][T20673] batadv0: entered promiscuous mode [ 565.903089][T20673] batadv0: entered allmulticast mode [ 565.909448][T20673] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 565.946334][T20673] team0: Device macvtap1 failed to register rx_handler [ 565.991596][T20673] batadv0: left allmulticast mode [ 565.996844][T20673] batadv0: left promiscuous mode [ 566.187007][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4126'. [ 566.195997][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4126'. [ 567.261521][T20645] syz.1.4119 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 567.746127][T20684] loop6: detected capacity change from 0 to 8192 [ 567.782739][T20090] loop6: p1 < > p2 p4 < p5 > [ 567.787468][T20090] loop6: partition table partially beyond EOD, truncated [ 567.816533][T20645] CPU: 1 UID: 0 PID: 20645 Comm: syz.1.4119 Tainted: G W syzkaller #0 PREEMPT(full) [ 567.816644][T20645] Tainted: [W]=WARN [ 567.816652][T20645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.816665][T20645] Call Trace: [ 567.816672][T20645] [ 567.816714][T20645] __dump_stack+0x1d/0x30 [ 567.816746][T20645] dump_stack_lvl+0x95/0xd0 [ 567.816826][T20645] dump_stack+0x15/0x1b [ 567.816853][T20645] dump_header+0x80/0x240 [ 567.816878][T20645] oom_kill_process+0x295/0x350 [ 567.816907][T20645] out_of_memory+0x97d/0xb80 [ 567.816975][T20645] try_charge_memcg+0x62e/0xa10 [ 567.817054][T20645] obj_cgroup_charge_pages+0x23/0xc0 [ 567.817142][T20645] __memcg_kmem_charge_page+0x9e/0x170 [ 567.817204][T20645] __alloc_frozen_pages_noprof+0x18a/0x360 [ 567.817306][T20645] alloc_pages_mpol+0xb3/0x260 [ 567.817398][T20645] alloc_pages_noprof+0x8f/0x130 [ 567.817427][T20645] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 567.817480][T20645] __kvmalloc_node_noprof+0x3d4/0x650 [ 567.817508][T20645] ? futex_hash_allocate+0x190/0x9d0 [ 567.817545][T20645] ? futex_hash_allocate+0x190/0x9d0 [ 567.817649][T20645] futex_hash_allocate+0x190/0x9d0 [ 567.817756][T20645] ? cap_task_prctl+0x13f/0x6e0 [ 567.817786][T20645] futex_hash_prctl+0xd8/0xf0 [ 567.817815][T20645] __se_sys_prctl+0xa3d/0x13f0 [ 567.817844][T20645] __x64_sys_prctl+0x67/0x80 [ 567.817876][T20645] x64_sys_call+0x2533/0x3020 [ 567.817906][T20645] do_syscall_64+0x12c/0x370 [ 567.817932][T20645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.817981][T20645] RIP: 0033:0x7fbbfe9ac799 [ 567.818000][T20645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.818022][T20645] RSP: 002b:00007fbbfcfa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 567.818120][T20645] RAX: ffffffffffffffda RBX: 00007fbbfec26270 RCX: 00007fbbfe9ac799 [ 567.818188][T20645] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 567.818205][T20645] RBP: 00007fbbfea42c99 R08: 0000000000000000 R09: 0000000000000000 [ 567.818221][T20645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.818235][T20645] R13: 00007fbbfec26308 R14: 00007fbbfec26270 R15: 00007ffc498c4a48 [ 567.818256][T20645] [ 568.071767][T20090] loop6: p1 start 134217728 is beyond EOD, truncated [ 568.078548][T20090] loop6: p2 size 591360 extends beyond EOD, truncated [ 568.095992][T20645] memory: usage 307032kB, limit 307200kB, failcnt 29459 [ 568.103966][T20645] memory+swap: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 568.110318][T20090] loop6: p5 size 591360 extends beyond EOD, [ 568.111972][T20645] kmem: usage 306900kB, limit 9007199254740988kB, failcnt 0 [ 568.111991][T20645] Memory cgroup stats for /syz1: [ 568.112179][T20645] cache 0 [ 568.130516][T20090] truncated [ 568.147121][T20684] loop6: p1 < > p2 p4 < p5 > [ 568.151896][T20684] loop6: partition table partially beyond EOD, truncated [ 568.159193][T20684] loop6: p1 start 134217728 is beyond EOD, truncated [ 568.165963][T20684] loop6: p2 size 591360 extends beyond EOD, truncated [ 568.173889][T20684] loop6: p5 size 591360 extends beyond EOD, truncated [ 568.176315][T20645] rss 0 [ 568.195017][T20688] loop5: detected capacity change from 0 to 512 [ 568.202315][T20645] shmem 0 [ 568.207028][T20645] mapped_file 0 [ 568.210492][T20645] dirty 0 [ 568.221465][T20645] writeback 0 [ 568.241355][T20645] workingset_refault_anon 20 [ 568.246775][T20688] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 568.262790][T20645] workingset_refault_file 2574 [ 568.265704][T20688] System zones: 0-2, 18-18, 34-34 [ 568.273499][T20645] swap 208896 [ 568.285389][T20645] swapcached 173793280 [ 568.332038][T20688] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4129: bg 0: block 248: padding at end of block bitmap is not set [ 568.351780][T20645] pgpgin 387343 [ 568.370996][T20645] pgpgout 387342 [ 568.391671][T20688] loop5: lost filesystem error report for type 5 error -117 [ 568.392058][T20688] Quota error (device loop5): write_blk: dquota write failed [ 568.394757][T20645] pgfault 205604 [ 568.399376][T20688] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 568.399415][T20688] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.4129: Failed to acquire dquot type 1 [ 568.407103][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 568.407125][ C1] EXT4-fs (loop5): last error at time 2000000532: ext4_validate_block_bitmap:441 [ 568.413641][T20702] loop8: detected capacity change from 0 to 128 [ 568.459755][T20645] pgmajfault 50 [ 568.471495][T20645] inactive_anon 0 [ 568.476832][T20645] active_anon 0 [ 568.501539][T20688] loop5: lost filesystem error report for type 5 error -117 [ 568.508801][T20645] inactive_file 0 [ 568.518880][T20645] active_file 4096 [ 568.529802][T20688] EXT4-fs (loop5): 1 truncate cleaned up [ 568.541585][T20645] unevictable 0 [ 568.548693][T20702] syz.8.4131: attempt to access beyond end of device [ 568.548693][T20702] loop8: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 568.556147][T20688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.562651][T20645] hierarchical_memory_limit 314572800 [ 568.609836][T20702] syz.8.4131: attempt to access beyond end of device [ 568.609836][T20702] loop8: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 568.621355][T20645] hierarchical_memsw_limit 9223372036854771712 [ 568.629257][T20688] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.632656][T20134] udevd[20134]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 568.640414][T20645] total_cache 0 [ 568.652289][T20090] udevd[20090]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 568.656988][T20702] syz.8.4131: attempt to access beyond end of device [ 568.656988][T20702] loop8: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 568.678612][T20701] udevd[20701]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 568.689192][ T28] audit: type=1400 audit(2000000533.041:2805): avc: denied { map } for pid=20700 comm="syz.8.4131" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 568.713989][T20645] total_rss 0 [ 568.717342][T20645] total_shmem 0 [ 568.720798][T20645] total_mapped_file 0 [ 568.725215][ T28] audit: type=1400 audit(2000000533.051:2806): avc: denied { execheap } for pid=20687 comm="syz.5.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 568.748772][T20645] total_dirty 0 [ 568.753382][T20470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.761605][T20645] total_writeback 0 [ 568.763918][T20470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 568.774881][T20645] total_workingset_refault_anon 20 [ 568.780087][T20645] total_workingset_refault_file 2574 [ 568.786632][T20645] total_swap 208896 [ 568.792837][T20470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 568.806367][T20645] total_swapcached 173793280 [ 568.811018][T20645] total_pgpgin 387343 [ 568.817685][T20470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 568.829519][T20645] total_pgpgout 387342 [ 568.834377][T20645] total_pgfault 205604 [ 568.838510][T20645] total_pgmajfault 50 [ 568.843115][T20645] total_inactive_anon 0 [ 568.891479][T20645] total_active_anon 0 [ 568.895600][T20645] total_inactive_file 0 [ 568.899789][T20645] total_active_file 4096 [ 568.914542][T20645] total_unevictable 0 [ 568.930865][T20645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4119,pid=20634,uid=0 [ 568.989956][T20645] Memory cgroup out of memory: Killed process 20645 (syz.1.4119) total-vm:100580kB, anon-rss:1264kB, file-rss:26684kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 569.429648][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.539520][T20470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.741861][T20470] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.788150][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.795327][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.830197][ T3634] kworker/u8:14: attempt to access beyond end of device [ 569.830197][ T3634] loop8: rw=1, sector=138, nr_sectors = 2 limit=128 [ 569.857326][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.864479][ T7112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.962666][ T7107] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 569.982190][T20470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.008200][ T7107] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 1 [ 570.046927][ T7107] loop5: lost filesystem error report for type 5 error -117 [ 570.183919][T20470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.199997][T20755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4136'. [ 570.449861][T20470] veth0_vlan: entered promiscuous mode [ 570.632642][T20768] loop6: detected capacity change from 0 to 512 [ 570.648385][T20768] EXT4-fs: inline encryption not supported [ 570.736952][T20768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 570.750782][T20470] veth1_vlan: entered promiscuous mode [ 570.780602][T20768] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 570.823135][T20470] veth0_macvtap: entered promiscuous mode [ 570.852734][T20470] veth1_macvtap: entered promiscuous mode [ 570.873028][T20470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.889780][T20470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.903496][T20768] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.4138: inode #0: comm syz.6.4138: iget: illegal inode # [ 570.930105][ T7107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.971389][T20768] loop6: lost filesystem error report for type 5 error -117 [ 570.973470][T20768] EXT4-fs (loop6): Remounting filesystem read-only [ 570.981231][T20776] loop8: detected capacity change from 0 to 512 [ 570.987585][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 570.987608][ C0] EXT4-fs (loop6): initial error at time 2000000535: ext4_init_orphan_info:583 [ 570.994422][ T7107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.000701][ C0] [ 571.000708][ C0] EXT4-fs (loop6): last error at time 2000000535: ext4_init_orphan_info:583 [ 571.030642][ T7107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.042494][ T7107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.052003][T20768] EXT4-fs (loop6): get orphan inode failed [ 571.058111][T20768] EXT4-fs (loop6): mount failed [ 571.160371][T20776] EXT4-fs: Ignoring removed nobh option [ 571.220148][T20776] ext4: Bad value for 'auto_da_alloc' [ 571.334552][T20791] loop5: detected capacity change from 0 to 1024 [ 571.347188][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4104'. [ 571.356322][ T28] audit: type=1400 audit(2000000535.721:2807): avc: denied { mount } for pid=20793 comm="syz.3.4104" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 571.519735][T20791] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 572.070980][T20791] loop5: detected capacity change from 0 to 2048 [ 572.111708][T20807] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 572.141006][T20807] loop6: detected capacity change from 0 to 128 [ 572.178100][T20818] loop3: detected capacity change from 0 to 512 [ 572.186816][T20090] Alternate GPT is invalid, using primary GPT. [ 572.193204][T20818] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 572.217188][T20818] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 572.233699][T20090] loop5: p1 p2 p3 [ 572.256745][T20818] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4144: bad orphan inode 4 [ 572.277853][T20818] loop3: lost filesystem error report for type 5 error -117 [ 572.277992][T20818] EXT4-fs (loop3): 1 orphan inode deleted [ 572.281324][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 572.297803][T20791] Alternate GPT is invalid, using primary GPT. [ 572.297882][T20791] loop5: p1 p2 p3 [ 572.304059][ C1] EXT4-fs (loop3): initial error at time 2000000536: ext4_orphan_get:1417 [ 572.304084][ C1] EXT4-fs (loop3): last error at time 2000000536: ext4_orphan_get:1417 [ 572.305221][T20818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.438077][T20470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.453456][T20694] udevd[20694]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 572.462251][T20838] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 572.464675][T20834] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 572.487988][T20134] udevd[20134]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 572.507789][T20090] udevd[20090]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 572.561072][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4149'. [ 572.575009][T20855] loop6: detected capacity change from 0 to 128 [ 572.593102][T20855] msdos: Bad value for 'gid' [ 572.593483][T20090] udevd[20090]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 572.597730][T20855] msdos: Bad value for 'gid' [ 572.612630][T20134] udevd[20134]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 572.616405][T20701] udevd[20701]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 572.686845][T20852] veth0_macvtap: left promiscuous mode [ 572.805774][ T28] audit: type=1400 audit(2000000537.171:2808): avc: denied { lock } for pid=20851 comm="syz.5.4149" path="socket:[60405]" dev="sockfs" ino=60405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 572.885334][T20858] loop8: detected capacity change from 0 to 128 [ 572.953957][T20861] syz.5.4149 (20861) used obsolete PPPIOCDETACH ioctl [ 573.009372][T20874] loop6: detected capacity change from 0 to 512 [ 573.020983][T20874] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 573.032852][ T28] audit: type=1400 audit(2000000537.411:2809): avc: denied { lock } for pid=20849 comm="syz.3.4146" path="socket:[58909]" dev="sockfs" ino=58909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 573.061588][T20874] EXT4-fs (loop6): orphan cleanup on readonly fs [ 573.088400][T20861] loop5: detected capacity change from 0 to 1756 [ 573.120056][T20874] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.4150: bad orphan inode 17 [ 573.183410][T20884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.243781][T20874] loop6: lost filesystem error report for type 5 error -117 [ 573.261301][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 573.275111][ C0] EXT4-fs (loop6): initial error at time 2000000537: ext4_orphan_get:1417 [ 573.283738][ C0] EXT4-fs (loop6): last error at time 2000000537: ext4_orphan_get:1417 [ 573.293895][T20884] EXT4-fs (loop8): 1 truncate cleaned up [ 573.301328][T20874] ext4_test_bit(bit=16, block=4) = 1 [ 573.307467][T20884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.340273][T20874] is_bad_inode(inode)=0 [ 573.354421][T20874] NEXT_ORPHAN(inode)=0 [ 573.382914][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.395794][T20874] max_ino=32 [ 573.399027][T20874] i_nlink=1 [ 573.607692][T20905] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4155'. [ 573.622793][T20874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 573.686247][T20919] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4158'. [ 573.725254][T20924] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 573.742996][ T28] audit: type=1400 audit(2000000538.111:2810): avc: denied { listen } for pid=20918 comm="syz.1.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 573.788871][T20926] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4158'. [ 573.824189][T20930] EXT4-fs (loop8): 1 orphan inode deleted [ 573.840563][T20930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.881697][ T3651] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 573.912654][ T3651] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 1 [ 573.993047][ T3651] loop8: lost filesystem error report for type 5 error -117 [ 574.000154][T20930] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.038612][T20945] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 574.072007][T20930] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.4160: iget: bad i_size value: -81346268269379574 [ 574.475715][T20937] msdos: Bad value for 'gid' [ 574.502445][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 574.519459][T20964] hsr_slave_0: left promiscuous mode [ 574.526949][T20964] hsr_slave_1: left promiscuous mode [ 574.568013][T20965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4164'. [ 574.649728][T20937] msdos: Bad value for 'gid' [ 575.572361][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.842248][T19714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.153901][T21012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21012 comm=syz.6.4170 [ 576.188975][T21012] netlink: 'syz.6.4170': attribute type 1 has an invalid length. [ 576.266855][T21027] bond1: (slave gretap1): making interface the new active one [ 576.433672][T21027] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 576.530797][T21012] vlan2: entered allmulticast mode [ 576.556719][T21012] bond1: entered allmulticast mode [ 576.583993][T21012] gretap1: entered allmulticast mode [ 576.612228][T21012] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 576.865090][T21061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4176'. [ 576.974002][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4177'. [ 577.019106][T21071] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 577.053875][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4179'. [ 577.406494][T21098] set_capacity_and_notify: 4 callbacks suppressed [ 577.406515][T21098] loop8: detected capacity change from 0 to 512 [ 577.415033][T21101] loop6: detected capacity change from 0 to 2048 [ 577.440185][T21098] EXT4-fs: inline encryption not supported [ 577.451756][ T3001] ================================================================== [ 577.459853][ T3001] BUG: KCSAN: data-race in set_nlink / set_nlink [ 577.466194][ T3001] [ 577.468507][ T3001] read to 0xffff8881085402b0 of 4 bytes by task 20701 on cpu 1: [ 577.476211][ T3001] set_nlink+0x29/0xb0 [ 577.480282][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 577.485649][ T3001] inode_permission+0x31f/0x3b0 [ 577.490504][ T3001] link_path_walk+0x779/0xe30 [ 577.495225][ T3001] path_openat+0x1c6/0x2050 [ 577.499744][ T3001] do_file_open+0x16c/0x290 [ 577.504270][ T3001] do_sys_openat2+0x94/0x130 [ 577.508867][ T3001] __x64_sys_openat+0xf2/0x120 [ 577.513731][ T3001] x64_sys_call+0x1e39/0x3020 [ 577.518410][ T3001] do_syscall_64+0x12c/0x370 [ 577.523003][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.528895][ T3001] [ 577.531203][ T3001] write to 0xffff8881085402b0 of 4 bytes by task 3001 on cpu 0: [ 577.539011][ T3001] set_nlink+0x99/0xb0 [ 577.543073][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 577.548356][ T3001] inode_permission+0x31f/0x3b0 [ 577.553553][ T3001] link_path_walk+0x779/0xe30 [ 577.558232][ T3001] path_lookupat+0x8c/0x500 [ 577.562743][ T3001] filename_lookup+0x190/0x390 [ 577.567510][ T3001] vfs_statx+0x96/0x170 [ 577.571835][ T3001] vfs_fstatat+0x118/0x170 [ 577.576248][ T3001] __se_sys_newfstatat+0x55/0x3e0 [ 577.581351][ T3001] __x64_sys_newfstatat+0x55/0x70 [ 577.586369][ T3001] x64_sys_call+0x2c64/0x3020 [ 577.591068][ T3001] do_syscall_64+0x12c/0x370 [ 577.595645][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.601534][ T3001] [ 577.603852][ T3001] value changed: 0x00000008 -> 0x00000009 [ 577.609563][ T3001] [ 577.611885][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 577.618197][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 577.628691][ T3001] Tainted: [W]=WARN [ 577.632499][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.642629][ T3001] ================================================================== [ 577.702199][T21098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 577.711571][T21098] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 577.861595][T21098] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 1 [ 577.879827][T21101] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 577.896650][T21098] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 577.925962][T21088] loop3: detected capacity change from 0 to 128 [ 577.955394][T21098] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.4183: Failed to acquire dquot type 1 [ 578.030057][T21098] loop8: lost filesystem error report for type 5 error -5 [ 578.030199][T21098] EXT4-fs (loop8): Remounting filesystem read-only [ 578.037471][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 578.037511][ C0] EXT4-fs (loop8): initial error at time 2000000542: ext4_acquire_dquot:7001 [ 578.037534][ C0] EXT4-fs (loop8): last error at time 2000000542: ext4_acquire_dquot:7001 [ 578.074405][T21098] EXT4-fs (loop8): 1 truncate cleaned up [ 578.080662][T21098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.145645][T13140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.